Elecom Co.,ltd.

84 CVEs across 127 Elecom Co.,ltd. products. Browse Elecom Co.,ltd. vulnerabilities, severities, and proof-of-concept exploits.

Elecom Co.,ltd. products with known CVEs

ProductCVEs
Elecom Lan Routers11
Wmc-X1800gst-B8
Wrc-X3000gs2a-B8
Wrc-X3000gs2-B8
Wrc-X3000gs2-W8
Wrc-G01-W7
Wrc-X1800gsa-B7
Wrc-X1800gs-B7
Wrc-X1800gsh-B7
Wrc-X3000gst2-B7
Wrc-X3200gst3-B7
Wrc-X6000qsa-G7
Wrc-X6000qs-G7
Wab-I1750-Ps6
Wrc-1167gst26
Wrc-2533gst26
Wrc-X1500gsa-B6
Wrc-X1500gs-B6
Wrc-X6000xs-G6
Wrc-X6000xst-G6
Wrc-Xe5400gsa-G6
Wrc-Xe5400gs-G6
Wab-M1775-Ps5
Wab-S1167-Ps5
Wab-S17755
Wrc-1167ghbk3-A5
Wrc-1167gs2-B5
Wrc-1167gs2h-B5
Wrc-1467ghbk-A5
Wrc-2533gs2-B5
Wrc-2533gs2v-B5
Wrc-2533gs2-W5
Wmc-2lx-B4
Wrc-1167febk-A4
Wrc-1167gebk-S4
Wrc-1167ghbk-S4
Wrc-1900ghbk-A4
Wrc-600ghbk-A4
Wrc-733febk2-A4
Wrc-F1167acf24
Wsc-X1800gs-B4
Elecom Lan Router3
Elecom Routers3
Wab-Be187-M3
Wab-Be36-M3
Wab-Be36-S3
Wab-Be72-M3
Wab-M21333
Wrc-1167febk-S3
Wrc-1750ghbk3
Elecom Co.,ltd. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61376High7.22026-07-28ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an…
CVE-2026-59764High7.22026-07-28ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary…
CVE-2026-44387Medium5.22026-07-28ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an a…
CVE-2026-42961Medium4.32026-05-13ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page whi…
CVE-2026-42950Medium4.32026-05-13ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the adm…
CVE-2026-42948Medium4.82026-05-13Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary s…
CVE-2026-42062Critical9.82026-05-13ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS…
CVE-2026-40621Critical9.82026-05-13ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authenticatio…
CVE-2026-35506High7.22026-05-13ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request…
CVE-2026-25107Medium6.52026-05-13ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption…
CVE-2026-24465Critical9.82026-02-03Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution.
CVE-2026-24449Medium4.62026-02-03For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.
CVE-2026-22550High8.82026-02-03OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command executio…
CVE-2026-20704Medium4.32026-02-03Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, u…
CVE-2025-66271Medium6.72025-12-09Clone for Windows provided by ELECOM CO.,LTD. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of…
CVE-2025-53472High7.22025-07-22WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI. If e…
CVE-2025-46267Medium4.92025-07-22Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B. If exploited, the product's hidden debug function may be enabled by a remote attacker who can…
CVE-2025-48890Critical9.82025-06-24WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in miniigd SOAP s…
CVE-2025-43879Critical9.82025-06-24WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet fun…
CVE-2025-43877Medium5.42025-06-24WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may be executed on the web browser of the use…
CVE-2025-41427High8.82025-06-24WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability…
CVE-2025-36519Medium4.32025-06-24Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2…
CVE-2024-43689Critical9.82024-10-21Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be execut…
CVE-2024-42412Medium6.12024-08-30Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious…
CVE-2024-39300Low3.72024-08-30Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote at…
CVE-2024-34577Medium6.12024-08-30Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in…
CVE-2024-40883High8.82024-08-01Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an admin…
CVE-2024-39607Medium6.82024-08-01OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user w…
CVE-2024-34021Medium6.82024-08-01Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafted file may be uploaded to the affected p…
CVE-2024-36103Medium6.82024-06-12OS command injection vulnerability in WRC-X5400GS-B v1.0.10 and earlier, and WRC-X5400GSA-B v1.0.10 and earlier allows a network-adjacent attacker with an admi…
CVE-2024-29225Medium4.32024-04-04ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a sp…
CVE-2024-26258High7.12024-04-04OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sendi…
CVE-2024-25568High8.82024-04-04OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sendin…
CVE-2024-25579Medium6.82024-02-28OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS c…
CVE-2024-23910High8.82024-02-28Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the…
CVE-2024-21798Medium4.82024-02-28ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with spec…
CVE-2024-22372Medium6.82024-01-24OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS c…
CVE-2023-49695Medium6.82023-12-12OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent atta…
CVE-2023-43757Medium6.52023-11-16Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated…
CVE-2023-43752High8.02023-11-16OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a networ…
CVE-2023-40072High8.82023-08-18OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a spe…
CVE-2023-40069Critical9.82023-08-18OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a…
CVE-2023-39944High8.82023-08-18OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbi…
CVE-2023-39455High8.82023-08-18OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafte…
CVE-2023-39454Critical9.82023-08-18Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.
CVE-2023-37565High8.02023-07-13Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by sending a specially c…
CVE-2023-37564High8.02023-07-13OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a ro…
CVE-2023-37563Medium6.52023-07-13ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive informa…
CVE-2023-37562High8.82023-07-13Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. If a user views a malicious…
CVE-2023-37568High8.02023-07-13ELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and earlier allow a network-adjacent authenticated attacker to execute a…
CVE-2023-37567Critical9.82023-07-13Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending…
CVE-2023-37566High8.02023-07-13Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by…
CVE-2023-37561Medium6.12023-07-13Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbi…
CVE-2023-37560Medium6.12023-07-13Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attacker to inject an arb…
CVE-2023-22282High7.32023-04-11WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if…
CVE-2023-22368High7.82023-02-15Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain privileges via a Troja…
CVE-2022-25915High8.82022-03-31Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmw…
CVE-2022-21799Medium5.22022-02-08Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitr…
CVE-2022-21173High8.82022-02-08Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1.05 and earlier, WRH-300BK3-S firmware v…
CVE-2021-20864High8.82021-12-01Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware…
CVE-2021-20863High8.02021-12-01OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1…
CVE-2021-20862Medium4.32021-12-01Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware…
CVE-2021-20861High8.82021-12-01Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmw…
CVE-2021-20860High8.82021-12-01Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167G…
CVE-2021-20859High8.02021-12-01ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmwa…
CVE-2021-20858Medium5.42021-12-01Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary s…
CVE-2021-20857Medium5.42021-12-01Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary s…
CVE-2021-20856Medium5.42021-12-01Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote auth…
CVE-2021-20855Medium5.42021-12-01Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote auth…
CVE-2021-20854Medium6.82021-12-01ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator p…
CVE-2021-20853Medium6.82021-12-01ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator p…
CVE-2021-20852Medium6.82021-12-01Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent…
CVE-2021-20739High8.82021-07-07WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an u…
CVE-2021-20738Medium6.52021-07-07WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vec…
CVE-2021-20651Critical9.12021-02-12Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a di…
CVE-2021-20650Medium6.52021-02-12Cross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an…
CVE-2021-20649Medium4.82021-02-12ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication respons…
CVE-2021-20648Medium6.82021-02-12ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20647Medium6.52021-02-12Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an a…
CVE-2021-20646Medium6.52021-02-12Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and execute an a…
CVE-2021-20645Medium5.42021-02-12Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
CVE-2021-20644Medium6.12021-02-12ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page.
CVE-2021-20643High7.52021-02-12Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a s…
CVE-2020-5634High8.82020-10-06ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14…