Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-36519 EUVD-2025-19000GHSA-hrgx-4g6p-h98r

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.6…

Published Jun 24, 2025 · Updated Feb 3, 2026 · Assigned by jpcert

Description

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W, WRC-1167GST2, WRC-1167GS2-B, and WRC-1167GS2H-B. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

Affected products

VendorProductAffectedFixed
ELECOM WRC-2533GST2 v1.31 and earlier —
ELECOM WRC-1167GST2 v1.34 and earlier —
ELECOM WRC-2533GS2V-B v1.69 and earlier —
ELECOM WRC-2533GS2-B v1.69 and earlier —
ELECOM WRC-2533GS2-W v1.69 and earlier —
ELECOM WRC-1167GS2-B v1.74 and earlier —
ELECOM WRC-1167GS2H-B v1.74 and earlier —

References