elecom Vulnerability Advisory Catalog

Total 63 security vulnerabilities recorded for elecom software and firmware.

← Back to All Vendors
Component: wrh-733gbk_firmware

ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an admini...

📅 2021-12-01
CVSS 6.8 Dossier →
Component: wrh-733gbk_firmware

ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an admini...

📅 2021-12-01
CVSS 6.8 Dossier →
Component: wrh-733gbk_firmware

Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network...

📅 2021-12-01
CVSS 6.8 Dossier →
Component: wrc-300febk_firmware

WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions al...

📅 2021-07-07
CVSS 8.8 Dossier →
Component: wrc-1167fs-w_firmware

WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspec...

📅 2021-07-07
CVSS 6.5 Dossier →
CVE-2021-20651 CRITICAL
Component: file_manager

Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing fil...

📅 2021-02-12
CVSS 9.1 Dossier →
Component: ncc-ewf100rmwh2_firmware

Cross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and e...

📅 2021-02-12
CVSS 6.5 Dossier →
Component: wrc-300febk-s_firmware

ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communicatio...

📅 2021-02-12
CVSS 4.8 Dossier →
Component: wrc-300febk-s_firmware

ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors....

📅 2021-02-12
CVSS 6.8 Dossier →
Component: wrc-300febk-s_firmware

Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and exe...

📅 2021-02-12
CVSS 6.5 Dossier →
Component: wrc-300febk-a_firmware

Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and exe...

📅 2021-02-12
CVSS 6.5 Dossier →
Component: wrc-300febk-a_firmware

Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors....

📅 2021-02-12
CVSS 5.4 Dossier →
Component: wrc-1467ghbk-a_firmware

ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page....

📅 2021-02-12
CVSS 6.1 Dossier →
Component: ld-ps\/u1_firmware

Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by proce...

📅 2021-02-12
CVSS 7.5 Dossier →
Component: wrc-2533gst2_firmware

ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior...

📅 2020-10-06
CVSS 8.8 Dossier →
Page 3 of 3 (63 Total Records)