Elecom Co.,ltd. vulnerabilities
84 CVEs and advisories name Elecom Co.,ltd. as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-61376ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings.
- CVE-2026-59764ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI.
- CVE-2026-44387ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI.
- CVE-2026-42961ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens.
- CVE-2026-42950ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value.
- CVE-2026-42948Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices.
- CVE-2026-42062ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter.
- CVE-2026-40621ELECOM wireless LAN access point devices do not require authentication to access some specific URLs.
- CVE-2026-35506ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter.
- CVE-2026-25107ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files.
- CVE-2026-24465Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices.
- CVE-2026-24449For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.
- CVE-2026-22550OS command injection vulnerability exists in ELECOM wireless LAN products.
- CVE-2026-20704Cross-site request forgery vulnerability exists in ELECOM wireless LAN products.
- CVE-2025-66271Clone for Windows provided by ELECOM CO.,LTD.
- CVE-2025-46267Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B.
- CVE-2025-53472WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabil
- CVE-2025-48890WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilit
- CVE-2025-43879WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilit
- CVE-2025-43877WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI.
- CVE-2025-41427WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Inject
- CVE-2025-36519Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69
- CVE-2024-43689Stack-based buffer overflow vulnerability exists in ELECOM wireless access points.
- CVE-2024-39300Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier.
- CVE-2024-34577Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing
- CVE-2024-42412Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi.
- CVE-2024-40883Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers.
- CVE-2024-39607OS command injection vulnerability exists in ELECOM wireless LAN routers.
- CVE-2024-34021Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers.
- CVE-2024-36103OS command injection vulnerability in WRC-X5400GS-B v1.0.10 and earlier, and WRC-X5400GSA-B v1.0.10 and earlier allows a network-adjacent at