ELECOM CO.,LTD. vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-61376 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings.High 8.6 · Jul 28, 2026
• CVE-2026-59764 ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI.High 8.6 · Jul 28, 2026
• CVE-2026-42062 ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter.Critical 9.3 · May 13, 2026
• CVE-2026-40621 ELECOM wireless LAN access point devices do not require authentication to access some specific URLs.Critical 9.3 · May 13, 2026
• CVE-2026-35506 ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter.High 8.6 · May 13, 2026
• CVE-2026-24465 Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices.Critical 9.3 · Feb 3, 2026
• CVE-2026-22550 OS command injection vulnerability exists in ELECOM wireless LAN products.High 8.6 · Feb 3, 2026
• CVE-2025-66271 Clone for Windows provided by ELECOM CO.,LTD.High 8.4 · Dec 9, 2025
• CVE-2025-53472 WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI.High 8.6 · Jul 22, 2025
• CVE-2025-48890 WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in miniigd SOAP seCritical 9.3 · Jun 24, 2025
• CVE-2025-43879 WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet funcCritical 9.3 · Jun 24, 2025
• CVE-2025-41427 WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability High 8.7 · Jun 24, 2025
• CVE-2024-43689 Stack-based buffer overflow vulnerability exists in ELECOM wireless access points.Critical 9.8 · Oct 20, 2024
• CVE-2024-40883 Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers.High 8.8 · Jul 31, 2024
• CVE-2024-26258 OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sendinHigh 7.1 · Apr 3, 2024
• CVE-2024-25568 OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sendingHigh 8.8 · Apr 3, 2024
• CVE-2024-23910 Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the High 8.8 · Feb 28, 2024
• CVE-2023-43752 OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a networkHigh 8 · Nov 16, 2023
• CVE-2023-40072 OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specHigh 8.8 · Aug 18, 2023
• CVE-2023-40069 OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a Critical 9.8 · Aug 18, 2023
• CVE-2023-39944 OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitHigh 8.8 · Aug 18, 2023
• CVE-2023-39455 OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially craftedHigh 8.8 · Aug 18, 2023
• CVE-2023-39454 Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.Critical 9.8 · Aug 18, 2023
• CVE-2023-37565 Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by sending a specially crHigh 8 · Jul 13, 2023
• CVE-2023-37564 OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a rooHigh 8 · Jul 13, 2023