High · 8.8 CVE-2024-43689 EUVD-2024-40425GHSA-63vh-qfjc-gpw5

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrar…

Published Oct 21, 2024 · Updated Sep 4, 2025 · Assigned by jpcert

Vendor: ELECOM Product: WAB-I1750-PS Product: WAB-M1775-PS Product: WAB-S1167-PS Product: WAB-S1775 Product: WAB-S733MI

Description

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed.

Affected products

Vendor	Product	Affected	Fixed
ELECOM	WAB-I1750-PS	v1.5.10 and earlier	—
ELECOM	WAB-M1775-PS	v2.1.4 and earlier	—
ELECOM	WAB-S1167-PS	v1.5.6 and earlier	—
ELECOM	WAB-S1775	v2.1.4 and earlier	—
ELECOM	WAB-S733MI	v1.3.2 and earlier	—

References

https://www.elecom.co.jp/news/security/20240827-01/
https://jvn.jp/en/jp/JVN24885537/