Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-29225 EUVD-2024-26239GHSA-mm47-557m-fxpp

ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive informa…

Published Apr 4, 2024 · Updated May 12, 2026 · Assigned by jpcert

Description

ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request.

Affected products

VendorProductAffectedFixed
ELECOM WRC-X3200GST3-B v1.25 and earlier —
ELECOM WRC-G01-W v1.24 and earlier —
ELECOM WMC-2LX-B v1.42 and earlier —
ELECOM WMC-X1800GST-B v1.42 and earlier —
ELECOM WSC-X1800GS-B v1.42 and earlier —

References