CVE-2023-37561 (wrh-300wh-h_firmware, wtc-300hwh_firmware, wtc-c1167gc-b_firmware, wtc-c1167gc-w_firmware)

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12 and earlier, WTC-300HWH v1.09 and earlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.

attacks cve lan open redirect phishing phishing attacks products routers url vulnerability web wireless