This vulnerability (CVE-2024-34021) affects ELECOM WRC-1167GST2 routers running firmware version 1.32 or earlier. It allows an authenticated user with administrative privileges to upload files of dangerous types without proper validation or restriction. Successful exploitation results in arbitrary OS command execution, which can compromise the device's integrity and availability. The CVSS 3.0 base score is 6.8, reflecting medium severity with high impact on confidentiality, integrity, and availability. No vendor patch or official fix information is available at this time.

An attacker with administrative access to the router can upload malicious files that lead to arbitrary OS command execution. This can result in full compromise of the device, including unauthorized control, data manipulation, or denial of service. The vulnerability requires administrative privileges and no user interaction, limiting exposure to trusted users but increasing risk if credentials are compromised.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for unauthorized access. Avoid uploading files to the device unless necessary and verify file types carefully. Follow ELECOM's official channels for updates on patches or mitigations.