Vulnerability in Elecom Co.,ltd. Wrc-x1800gsa-b
CVE-2026-25107
ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of the product, and a victim administrator…
EPSS: 0.000 (5.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.
Affected products
- Elecom Co.,ltd. Wrc-x1800gsa-b — versions v1.19 and earlier
- Elecom Co.,ltd. Wrc-x1800gs-b — versions v1.19 and earlier
- Elecom Co.,ltd. Wrc-x1800gsh-b — versions v1.19 and earlier
- Elecom Co.,ltd. Wrc-x3000gs2a-b — versions v1.09 and earlier
- Elecom Co.,ltd. Wrc-x3000gs2-b — versions v1.09 and earlier
- Elecom Co.,ltd. Wrc-x3000gs2-w — versions v1.09 and earlier
- Elecom Co.,ltd. Wrc-x3000gst2-b — versions v1.06 and earlier
- Elecom Co.,ltd. Wrc-x6000qsa-g — versions v1.14 and earlier
- Elecom Co.,ltd. Wrc-x6000qs-g — versions v1.14 and earlier
- Elecom Co.,ltd. Wrc-x6000xs-g — versions v1.12 and earlier
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-25107?
- CVE-2026-25107 is a medium-severity vulnerability in Elecom Co.,ltd. Wrc-x1800gsa-b, classified under Use of Hard-coded Cryptographic Key. CVSS score: 6.5/10. Published 2026-05-13.
- How severe is CVE-2026-25107?
- Medium severity. CVSS v3 base score is 6.5 out of 10.