Elecom Co.,ltd. Wrc-X3000gs2-W
8 CVEs affecting Elecom Co.,ltd. Wrc-X3000gs2-W. Latest disclosed: 2026-05-13. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-22550 | High | 8.8 | 2026-02-03 | OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command executio… |
CVE-2024-40883 | High | 8.8 | 2024-08-01 | Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an admin… |
CVE-2023-43752 | High | 8.0 | 2023-11-16 | OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a networ… |
CVE-2024-39607 | Medium | 6.8 | 2024-08-01 | OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user w… |
CVE-2024-22372 | Medium | 6.8 | 2024-01-24 | OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS c… |
CVE-2026-25107 | Medium | 6.5 | 2026-05-13 | ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption… |
CVE-2024-34577 | Medium | 6.1 | 2024-08-30 | Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in… |
CVE-2026-20704 | Medium | 4.3 | 2026-02-03 | Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, u… |