Elecom

63 CVEs across 256 Elecom products. Browse Elecom vulnerabilities, severities, and proof-of-concept exploits.

Elecom products with known CVEs

ProductCVEs
Wrc-1167gst210
Wrc-1167gst2 Firmware10
Wrc-2533gs2-B10
Wrc-2533gs2-B Firmware10
Wrc-2533gs2-W10
Wrc-2533gs2-W Firmware10
Wrc-2533gst210
Wrc-2533gst2 Firmware10
Edwrc-2533gst27
Edwrc-2533gst2 Firmware7
Wrc-1167gst2a7
Wrc-1167gst2a Firmware7
Wrc-1167gst2h7
Wrc-1167gst2h Firmware7
Wrc-1750gs7
Wrc-1750gs Firmware7
Wrc-1750gsv7
Wrc-1750gsv Firmware7
Wrc-1900gst7
Wrc-1900gst Firmware7
Wrc-2533gst7
Wrc-2533gst2-G7
Wrc-2533gst2-G Firmware7
Wrc-2533gst2sp7
Wrc-2533gst2sp Firmware7
Wrc-2533gsta7
Wrc-2533gsta Firmware7
Wrc-2533gst Firmware7
Wrc-1167ghbk3-A5
Wrc-1167ghbk3-A Firmware5
Wrh-733gbk5
Wrh-733gbk Firmware5
Wrh-733gwh5
Wrh-733gwh Firmware5
Wrc-1167febk-A4
Wrc-1167febk-A Firmware4
Wrc-1167gebk-S4
Wrc-1167gebk-S Firmware4
Wrc-1167ghbk-S4
Wrc-1167ghbk-S Firmware4
Wrc-X1500gsa-B4
Wrc-X1500gsa-B Firmware4
Wrc-X1500gs-B4
Wrc-X1500gs-B Firmware4
Wab-I1750-Ps3
Wab-I1750-Ps Firmware3
Wrc-1167febk-S3
Wrc-1167febk-S Firmware3
Wrc-1167gs2-B3
Wrc-1167gs2-B Firmware3
Elecom CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-24465Critical9.82026-02-03Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution.
CVE-2026-24449Medium4.62026-02-03For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.
CVE-2026-22550High8.82026-02-03OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command executio…
CVE-2024-43689Critical9.82024-10-21Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be execut…
CVE-2024-42412Medium6.12024-08-30Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious…
CVE-2024-39300Low3.72024-08-30Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote at…
CVE-2024-34577Medium6.12024-08-30Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in…
CVE-2024-40883High8.82024-08-01Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an admin…
CVE-2024-23910High8.82024-02-28Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the…
CVE-2024-21798Medium4.82024-02-28ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with spec…
CVE-2024-22372Medium6.82024-01-24OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS c…
CVE-2023-49695Medium6.82023-12-12OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent atta…
CVE-2023-43757Medium6.52023-11-16Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated…
CVE-2023-43752High8.02023-11-16OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a networ…
CVE-2023-40072High8.82023-08-18OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a spe…
CVE-2023-40069Critical9.82023-08-18OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a…
CVE-2023-39944High8.82023-08-18OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbi…
CVE-2023-39455High8.82023-08-18OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafte…
CVE-2023-39454Critical9.82023-08-18Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.
CVE-2023-39445High8.82023-08-18Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code b…
CVE-2023-38576High8.02023-08-18Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands…
CVE-2023-38132High8.82023-08-18LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in…
CVE-2023-35991Critical9.82023-08-18Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and…
CVE-2023-32626Critical9.82023-08-18Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's c…
CVE-2023-37565High8.02023-07-13Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by sending a specially c…
CVE-2023-37564High8.02023-07-13OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a ro…
CVE-2023-37563Medium6.52023-07-13ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive informa…
CVE-2023-37562High8.82023-07-13Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. If a user views a malicious…
CVE-2023-37568High8.02023-07-13ELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and earlier allow a network-adjacent authenticated attacker to execute a…
CVE-2023-37567Critical9.82023-07-13Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending…
CVE-2023-37566High8.02023-07-13Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by…
CVE-2023-37561Medium6.12023-07-13Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbi…
CVE-2023-37560Medium6.12023-07-13Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attacker to inject an arb…
CVE-2023-22282High7.32023-04-11WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if…
CVE-2023-22368High7.82023-02-15Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain privileges via a Troja…
CVE-2022-25915High8.82022-03-31Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmw…
CVE-2022-21799Medium5.22022-02-08Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitr…
CVE-2022-21173High8.82022-02-08Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1.05 and earlier, WRH-300BK3-S firmware v…
CVE-2021-20864High8.82021-12-01Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware…
CVE-2021-20863High8.02021-12-01OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1…
CVE-2021-20862Medium4.32021-12-01Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware…
CVE-2021-20861High8.82021-12-01Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmw…
CVE-2021-20860High8.82021-12-01Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167G…
CVE-2021-20859High8.02021-12-01ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmwa…
CVE-2021-20858Medium5.42021-12-01Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary s…
CVE-2021-20857Medium5.42021-12-01Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary s…
CVE-2021-20856Medium5.42021-12-01Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote auth…
CVE-2021-20855Medium5.42021-12-01Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote auth…
CVE-2021-20854Medium6.82021-12-01ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator p…
CVE-2021-20853Medium6.82021-12-01ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator p…
CVE-2021-20852Medium6.82021-12-01Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent…
CVE-2021-20739High8.82021-07-07WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an u…
CVE-2021-20738Medium6.52021-07-07WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vec…
CVE-2021-20651Critical9.12021-02-12Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a di…
CVE-2021-20650Medium6.52021-02-12Cross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an…
CVE-2021-20649Medium4.82021-02-12ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication respons…
CVE-2021-20648Medium6.82021-02-12ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20647Medium6.52021-02-12Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an a…
CVE-2021-20646Medium6.52021-02-12Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and execute an a…
CVE-2021-20645Medium5.42021-02-12Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
CVE-2021-20644Medium6.12021-02-12ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page.
CVE-2021-20643High7.52021-02-12Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a s…
CVE-2020-5634High8.82020-10-06ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14…