Vendor
ELECOM
84 known vulnerabilities.
ELECOM at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 3 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 7 | 2 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 4 | 1 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 1 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 0 |
| Jun 2025 | 5 | 2 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Products
ELECOM LAN routers 11
WMC-X1800GST-B 8
WRC-X3000GS2-B 8
WRC-X3000GS2-W 8
WRC-X3000GS2A-B 8
WRC-X3200GST3-B 7
WRC-G01-W 7
WRC-X3000GST2-B 7
WRC-X1800GS-B 7
WRC-X1800GSA-B 7
WRC-X1800GSH-B 7
WRC-X6000QS-G 7
WRC-X6000QSA-G 7
WAB-I1750-PS 6
WRC-X1500GS-B 6
WRC-2533GST2 6
WRC-X1500GSA-B 6
WRC-1167GST2 6
WRC-X6000XS-G 6
WRC-X6000XST-G 6
WRC-XE5400GS-G 6
WRC-XE5400GSA-G 6
WAB-M1775-PS 5
WAB-S1775 5
WAB-S1167-PS 5
WRC-1167GHBK3-A 5
WRC-1467GHBK-A 5
WRC-2533GS2V-B 5
WRC-2533GS2-B 5
WRC-2533GS2-W 5
WRC-1167GS2-B 5
WRC-1167GS2H-B 5
WRC-1167GHBK-S 4
WRC-1167GEBK-S 4
WRC-1167FEBK-A 4
WMC-2LX-B 4
WSC-X1800GS-B 4
WRC-F1167ACF2 4
WRC-600GHBK-A 4
WRC-733FEBK2-A 4
84 results · Feed
-
High 7.2
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings…
-
High 7.2
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this v…
-
Medium 5.2
ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. …
-
Medium 4.3
ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF toke…
-
Medium 4.3
ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a…
-
Medium 4.8
Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrat…
-
Critical 9.8
ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If proces…
-
Critical 9.8
ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected produ…
-
High 7.2
ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr pa…
-
Medium 6.5
ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration file…
-
Critical 9.8
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead…
-
Medium 4.6
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.
-
High 7.2
OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may …
-
Medium 4.3
Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page wh…
-
Medium 6.7
Clone for Windows provided by ELECOM CO.,LTD. registers a Windows service with an unquoted file path. A user with the w…
-
Medium 4.9
Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B. If exploited, the product's hidden debug function may…
-
High 7.2
WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command I…
-
Critical 9.8
WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Inj…
-
Critical 9.8
WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Inj…
-
Medium 5.4
WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may b…
-
High 8.8
WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS comman…
-
Medium 4.3
Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-…
-
High 8.8
Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HT…
-
High 8.1
Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet functio…
-
Medium 4.6
Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to…
-
Medium 6.1
Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values i…
-
Medium 6.5
Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging …
-
Medium 6.8
OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to th…
-
Medium 6.8
Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafte…
-
Medium 6.8
OS command injection vulnerability in WRC-X5400GS-B v1.0.10 and earlier, and WRC-X5400GSA-B v1.0.10 and earlier allows …
-
Medium 4.3
ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containi…
-
Medium 6.8
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials t…
-
High 8.8
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to…
-
Medium 6.8
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administra…
-
Medium 4.3
Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remot…
-
Medium 4.8
ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user c…
-
Medium 6.8
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administra…
-
Medium 6.8
OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 an…
-
Unscored —
OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000…
-
Unscored —CVE-2023-43757 Public exploit
Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION al…