Skip to content
OpenAdvisories
High · 7.2 CVE-2025-53472 EUVD-2025-22298GHSA-p7jm-pv37-vmrp

WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabi…

Published Jul 22, 2025 · Updated Jul 22, 2025 · Assigned by jpcert

Description

WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to WebGUI.

Affected products

VendorProductAffectedFixed
ELECOM WRC-BE36QS-B v1.1.3 and earlier —
ELECOM WRC-W701-B v1.1.3 and earlier —

References