CVE-2023-35991

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Aug 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-359927.8An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as CVE-2023-359937.8A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15 CVE-2023-359947.8Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specia CVE-2023-359957.8Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specia CVE-2023-359967.8Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specia CVE-2023-359977.8Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specia CVE-2023-359984.6A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network CVE-2023-36008.8During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This v CVE-2023-360006.5A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacke CVE-2023-360024.3A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on CVE-2023-360037.3XAML Diagnostics Elevation of Privilege Vulnerability CVE-2023-360047.5Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability