Is CVE-2023-43757 actively exploited?

No active exploitation of CVE-2023-43757 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-43757 be exploited remotely?

Partially. CVE-2023-43757 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2023-43757?

CVE-2023-43757 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2023-43757

MEDIUM

CVE-2023-43757

CWE-326Published: November 16, 2023· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.

NVD Source

Technical Analysis

CVE-2023-43757 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 6.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Vendors & Products

elecom68 product(s)

wrc-2533ghbk2-t firmwarewrc-2533ghbk2-twrc-2533ghbk-i firmwarewrc-2533ghbk-iwrc-1750ghbk2-i firmwarewrc-1750ghbk2-iwrc-1750ghbk-e firmwarewrc-1750ghbk-ewrc-1750ghbk firmwarewrc-1750ghbkwrc-1167ghbk2 firmwarewrc-1167ghbk2+56

Source: NVD CPE · 68 total CPE entries