EC
Vendor
ELECOM CO.,LTD.
269
CVEs
0
On KEV
0
New 30D
Products
WR8.8
WRC-X3000GS2-B
ELECOM CO.,LTD.
8 CVEs0 on KEV0 new
WR8.8
WRC-X3000GS2-W
ELECOM CO.,LTD.
8 CVEs0 on KEV0 new
WR8.8
WRC-X3000GS2A-B
ELECOM CO.,LTD.
8 CVEs0 on KEV0 new
WM8.8
WMC-X1800GST-B
ELECOM CO.,LTD.
7 CVEs0 on KEV0 new
WR8.8
WRC-G01-W
ELECOM CO.,LTD.
7 CVEs0 on KEV0 new
WR8.8
WRC-X3000GST2-B
ELECOM CO.,LTD.
7 CVEs0 on KEV0 new
WR8.8
WRC-X3200GST3-B
ELECOM CO.,LTD.
7 CVEs0 on KEV0 new
WR8.8
WRC-1167GST2
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-2533GST2
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X1500GS-B
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X1500GSA-B
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X1800GS-B
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X1800GSA-B
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X1800GSH-B
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X6000QS-G
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X6000QSA-G
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X6000XS-G
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-X6000XST-G
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-XE5400GS-G
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WR8.8
WRC-XE5400GSA-G
ELECOM CO.,LTD.
6 CVEs0 on KEV0 new
WA9.8
WAB-I1750-PS
ELECOM CO.,LTD.
5 CVEs0 on KEV0 new
WR8.8
WRC-1167GS2-B
ELECOM CO.,LTD.
5 CVEs0 on KEV0 new
WR8.8
WRC-1167GS2H-B
ELECOM CO.,LTD.
5 CVEs0 on KEV0 new
WR8.8
WRC-2533GS2-B
ELECOM CO.,LTD.
5 CVEs0 on KEV0 new
WR8.8
WRC-2533GS2-W
ELECOM CO.,LTD.
5 CVEs0 on KEV0 new
WR8.8
WRC-2533GS2V-B
ELECOM CO.,LTD.
5 CVEs0 on KEV0 new
WA9.8
WAB-M1775-PS
ELECOM CO.,LTD.
4 CVEs0 on KEV0 new
WA9.8
WAB-S1167-PS
ELECOM CO.,LTD.
4 CVEs0 on KEV0 new
WA9.8
WAB-S1775
ELECOM CO.,LTD.
4 CVEs0 on KEV0 new
WA4.8
WAB-BE187-M
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WA4.8
WAB-BE36-M
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WA4.8
WAB-BE36-S
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WA4.8
WAB-BE72-M
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WM7.1
WMC-2LX-B
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WR9.8
WRC-BE65QSD-B
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WR9.8
WRC-BE72XSD-B
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WR9.8
WRC-BE72XSD-BA
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WR9.8
WRC-W702-B
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WS8.8
WSC-X1800GS-B
ELECOM CO.,LTD.
3 CVEs0 on KEV0 new
WA7.2
WAB-M2133
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
WA9.8
WAB-S733MI
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
WR7.2
WRC-BE36QS-B
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
WR7.2
WRC-W701-B
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
WR8.8
WRC-X3000GS
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
WR8.8
WRC-X3000GSA
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
WR8.8
WRC-X3000GSN
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
WR9.8
WRH-733GBK
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
WR9.8
WRH-733GWH
ELECOM CO.,LTD.
2 CVEs0 on KEV0 new
CF6.7
Clone for Windows
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
LA6.5
LAN-W300N/P
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
LA6.5
LAN-W300N/RS
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
LA6.5
LAN-W301NR
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
LA6.5
LAN-WH300N/DGP
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
LA6.5
LAN-WH300NDGPE
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
WA9.8
WAB-S300IW-AC
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
WA9.8
WAB-S300IW-PD
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
WA9.8
WAB-S300IW2-PD
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
WA9.8
WAB-S733IW-AC
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
WA9.8
WAB-S733IW-PD
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
WA9.8
WAB-S733IW2-PD
ELECOM CO.,LTD.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61376 | WA WAB-M2133 ELECOM CO.,LTD. | 7.2 | Jul 28 | ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings |
| CVE-2026-59764 | WR WRC-X3000GS3A-B ELECOM CO.,LTD. | 7.2 | Jul 28 | ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI |
| CVE-2026-44387 | WA WAB-S1775 ELECOM CO.,LTD. | 5.2 | Jul 28 | ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI |
| CVE-2026-42961 | WA WAB-BE36-S ELECOM CO.,LTD. | 4.3 | May 13 | ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens |
| CVE-2026-42950 | WA WAB-BE36-M ELECOM CO.,LTD. | 4.3 | May 13 | ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value |
| CVE-2026-42948 | WA WAB-BE36-M ELECOM CO.,LTD. | 4.8 | May 13 | Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices |
| CVE-2026-42062 | WR WRC-BE72XSD-B ELECOM CO.,LTD. | 9.8 | May 13 | ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter |
| CVE-2026-40621 | WR WRC-BE72XSD-BA ELECOM CO.,LTD. | 9.8 | May 13 | ELECOM wireless LAN access point devices do not require authentication to access some specific URLs |
| CVE-2026-35506 | WR WRC-BE72XSD-BA ELECOM CO.,LTD. | 7.2 | May 13 | ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter |
| CVE-2026-25107 | WR WRC-X6000QS-G ELECOM CO.,LTD. | 6.5 | May 13 | ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files |
| CVE-2026-24465 | WA WAB-S300IW-AC ELECOM CO.,LTD. | 9.8 | Feb 3 | Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices |
| CVE-2026-24449 | WR WRC-X1500GSA-B ELECOM CO.,LTD. | 4.6 | Feb 3 | For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information |
| CVE-2026-22550 | WR WRC-X3000GS2-B ELECOM CO.,LTD. | 8.8 | Feb 3 | OS command injection vulnerability exists in ELECOM wireless LAN products |
| CVE-2026-20704 | WR WRC-X3000GS2-B ELECOM CO.,LTD. | 4.3 | Feb 3 | Cross-site request forgery vulnerability exists in ELECOM wireless LAN products |
| CVE-2025-66271 | CF Clone for Windows ELECOM CO.,LTD. | 6.7 | Dec 9 | Clone for Windows provided by ELECOM CO.,LTD |
| CVE-2025-46267 | WR WRC-BE36QS-B ELECOM CO.,LTD. | 4.9 | Jul 22 | Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B |
| CVE-2025-53472 | WR WRC-BE36QS-B ELECOM CO.,LTD. | 7.2 | Jul 22 | WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI |
| CVE-2025-48890 | WR WRH-733GWH ELECOM CO.,LTD. | 9.8 | Jun 24 | WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in miniigd SOAP service |
| CVE-2025-43879 | WR WRH-733GBK ELECOM CO.,LTD. | 9.8 | Jun 24 | WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet function |
| CVE-2025-43877 | WR WRC-1167GHBK2-S ELECOM CO.,LTD. | 5.4 | Jun 24 | WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI |
| CVE-2025-41427 | WR WRC-X3000GSA ELECOM CO.,LTD. | 8.8 | Jun 24 | WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection… |
| CVE-2025-36519 | WR WRC-1167GST2 ELECOM CO.,LTD. | 4.3 | Jun 24 | Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W,… |
| CVE-2024-43689 | WA WAB-M1775-PS ELECOM CO.,LTD. | 9.8 | Oct 21 | Stack-based buffer overflow vulnerability exists in ELECOM wireless access points |
| CVE-2024-39300 | WA WAB-I1750-PS ELECOM CO.,LTD. | 3.7 | Aug 30 | Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier |
| CVE-2024-34577 | WR WRC-X3000GS2-W ELECOM CO.,LTD. | 6.1 | Aug 30 | Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi |
| CVE-2024-42412 | WA WAB-S1167-PS ELECOM CO.,LTD. | 6.1 | Aug 30 | Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi |
| CVE-2024-40883 | WR WRC-X6000XST-G ELECOM CO.,LTD. | 8.8 | Aug 1 | Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers |
| CVE-2024-39607 | WR WRC-XE5400GSA-G ELECOM CO.,LTD. | 6.8 | Aug 1 | OS command injection vulnerability exists in ELECOM wireless LAN routers |
| CVE-2024-34021 | WR WRC-2533GS2-B ELECOM CO.,LTD. | 6.8 | Aug 1 | Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers |
| CVE-2024-36103 | WR WRC-X5400GS-B ELECOM CO.,LTD. | 6.8 | Jun 12 | OS command injection vulnerability in WRC-X5400GS-B v1.0.10 and earlier, and WRC-X5400GSA-B v1.0.10 and earlier allows a network-adjacent attacker with an administrative privilege… |
| CVE-2024-29225 | WR WRC-X3200GST3-B ELECOM CO.,LTD. | 4.3 | Apr 4 | ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted… |
| CVE-2024-26258 | WM WMC-X1800GST-B ELECOM CO.,LTD. | 7.1 | Apr 4 | OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially… |
| CVE-2024-25568 | WR WRC-G01-W ELECOM CO.,LTD. | 8.8 | Apr 4 | OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially… |
| CVE-2024-25579 | WR WRC-2533GST2 ELECOM CO.,LTD. | 6.8 | Feb 28 | OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a… |
| CVE-2024-23910 | WM WMC-X1800GST-B ELECOM CO.,LTD. | 8.8 | Feb 28 | Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of… |
| CVE-2024-21798 | WR WRC-2533GST2 ELECOM CO.,LTD. | 4.8 | Feb 28 | ELECOM wireless LAN routers contain a cross-site scripting vulnerability |
| CVE-2024-22372 | WR WRC-X6000XS-G ELECOM CO.,LTD. | 6.8 | Jan 24 | OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a… |
| CVE-2023-49695 | WR WRC-X3000GSN ELECOM CO.,LTD. | 6.8 | Dec 12 | OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an… |
| CVE-2023-43752 | WR WRC-X3000GS2-W ELECOM CO.,LTD. | 8.0 | Nov 16 | OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent… |
| CVE-2023-43757 | WR WRH-300SV ELECOM CO.,LTD. | 6.5 | Nov 16 | Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD |
