This vulnerability involves improper neutralization of special elements used in OS commands within ELECOM WRC-X1500GS-B routers. An attacker who already has administrative privileges on the device's network interface can exploit this flaw by sending crafted requests that execute arbitrary OS commands. This can lead to full compromise of confidentiality, integrity, and availability of the affected device. The issue affects firmware versions up to v1.11. No vendor advisory or patch information is currently available, and the vulnerability was published on January 24, 2024.

Successful exploitation allows an attacker with administrative network access to execute arbitrary OS commands on the affected router. This can lead to complete compromise of the device, including unauthorized access to sensitive information, modification or deletion of data, and disruption of device availability. The impact is rated high on confidentiality, integrity, and availability based on the CVSS vector, but overall severity is medium due to the requirement for administrative privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, ensure that administrative access to the router is tightly controlled and limited to trusted personnel only. Monitor for unusual administrative activity and consider network segmentation to reduce exposure. Do not expose the administrative interface to untrusted networks.