elecom Vulnerability Advisory Catalog

Total 63 security vulnerabilities recorded for elecom software and firmware.

← Back to All Vendors
CVE-2026-24465 CRITICAL
Component: wab-s300iw-pd_firmware

Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution....

📅 2026-02-03
CVSS 9.8 Dossier →
Component: wrc-x1500gsa-b_firmware

For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information....

📅 2026-02-03
CVSS 4.6 Dossier →
Component: wrc-x1500gsa-b_firmware

OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command...

📅 2026-02-03
CVSS 8.8 Dossier →
CVE-2024-43689 CRITICAL
Component: wab-i1750-ps_firmware

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may ...

📅 2024-10-21
CVSS 9.8 Dossier →
Component: wab-s1167-ps_firmware

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a m...

📅 2024-08-30
CVSS 6.1 Dossier →
Component: wab-i1750-ps_firmware

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a ...

📅 2024-08-30
CVSS 3.7 Dossier →
Component: wrc-x3000gs2-b_firmware

Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input v...

📅 2024-08-30
CVSS 6.1 Dossier →
Component: wrc-2533gs2-b_firmware

Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with...

📅 2024-08-01
CVSS 8.8 Dossier →
Component: wrc-1167gs2-b_firmware

Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to h...

📅 2024-02-28
CVSS 8.8 Dossier →
Component: wrc-1167gs2-b_firmware

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product ...

📅 2024-02-28
CVSS 4.8 Dossier →
Component: wrc-x1800gs-b_firmware

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbit...

📅 2024-01-24
CVSS 6.8 Dossier →
Component: wrc-x3000gsn_firmware

OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adja...

📅 2023-12-12
CVSS 6.8 Dossier →
Component: wrc-2533ghbk2-t_firmware

Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthe...

📅 2023-11-16
CVSS 6.5 Dossier →
Component: wrc-x3000gs2-w_firmware

OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows...

📅 2023-11-16
CVSS 8.0 Dossier →
Component: wab-s600-ps_firmware

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by send...

📅 2023-08-18
CVSS 8.8 Dossier →
CVE-2023-40069 CRITICAL
Component: wrc-f1167acf_firmware

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by ...

📅 2023-08-18
CVSS 9.8 Dossier →
Component: wrc-f1167acf_firmware

OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execut...

📅 2023-08-18
CVSS 8.8 Dossier →
Component: wrc-600ghbk-a_firmware

OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a special...

📅 2023-08-18
CVSS 8.8 Dossier →
CVE-2023-39454 CRITICAL
Component: wrc-x1800gs-b_firmware

Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code....

📅 2023-08-18
CVSS 9.8 Dossier →
Component: wrc-1467ghbk-a_firmware

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitra...

📅 2023-08-18
CVSS 8.8 Dossier →
Component: lan-wh300n\/re_firmware

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS ...

📅 2023-08-18
CVSS 8.0 Dossier →
Component: lan-w451ngr_firmware

LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker t...

📅 2023-08-18
CVSS 8.8 Dossier →
CVE-2023-35991 CRITICAL
Component: lan-wh300andgpe_firmware

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management co...

📅 2023-08-18
CVSS 9.8 Dossier →
CVE-2023-32626 CRITICAL
Component: lan-w300n\/rs_firmware

Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the pr...

📅 2023-08-18
CVSS 9.8 Dossier →
Page 1 of 3 (63 Total Records)