Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25…
Priority LOW 38Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.
Why it matters now
EPSS 0.00462 40th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ELECOM CO.,LTD. | ELECOM LAN routers | WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior | — | No fix listed | CNA |
- ELECOM LAN routers VendorELECOM CO.,LTD. Affected WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior Fixed in — No fix listed CNA
CPE configurations NVD · 28
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:elecom:wrc-1167gst2_firmware:*:*:*:*:*:*:*:* | up to 1.25 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-1167gst2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-1167gst2a_firmware:*:*:*:*:*:*:*:* | up to 1.25 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-1167gst2a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-1167gst2h_firmware:*:*:*:*:*:*:*:* | up to 1.25 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-1167gst2h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-2533gs2-b_firmware:*:*:*:*:*:*:*:* | up to 1.52 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-2533gs2-b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-2533gs2-w_firmware:*:*:*:*:*:*:*:* | up to 1.52 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-2533gs2-w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
- cpe:2.3:o:elecom:wrc-1167gst2_firmware:*:*:*:*:*:*:*:* Versions up to 1.25 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-1167gst2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-1167gst2a_firmware:*:*:*:*:*:*:*:* Versions up to 1.25 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-1167gst2a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-1167gst2h_firmware:*:*:*:*:*:*:*:* Versions up to 1.25 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-1167gst2h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-2533gs2-b_firmware:*:*:*:*:*:*:*:* Versions up to 1.52 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-2533gs2-b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-2533gs2-w_firmware:*:*:*:*:*:*:*:* Versions up to 1.52 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-2533gs2-w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
Show 18 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:elecom:wrc-1750gs_firmware:*:*:*:*:*:*:*:* | up to 1.03 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-1750gs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-1750gsv_firmware:*:*:*:*:*:*:*:* | up to 2.11 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-1750gsv:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-1900gst_firmware:*:*:*:*:*:*:*:* | up to 1.03 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-1900gst:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-2533gst_firmware:*:*:*:*:*:*:*:* | up to 1.03 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-2533gst:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-2533gst2_firmware:*:*:*:*:*:*:*:* | up to 1.25 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-2533gst2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-2533gsta_firmware:*:*:*:*:*:*:*:* | up to 1.03 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-2533gsta:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-2533gst2sp_firmware:*:*:*:*:*:*:*:* | up to 1.25 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-2533gst2sp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:wrc-2533gst2-g_firmware:*:*:*:*:*:*:*:* | up to 1.25 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:wrc-2533gst2-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
| cpe:2.3:o:elecom:edwrc-2533gst2_firmware:*:*:*:*:*:*:*:* | up to 1.25 | Vulnerable | ELECOM CO.,LTD. |
| cpe:2.3:h:elecom:edwrc-2533gst2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ELECOM CO.,LTD. |
- cpe:2.3:o:elecom:wrc-1750gs_firmware:*:*:*:*:*:*:*:* Versions up to 1.03 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-1750gs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-1750gsv_firmware:*:*:*:*:*:*:*:* Versions up to 2.11 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-1750gsv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-1900gst_firmware:*:*:*:*:*:*:*:* Versions up to 1.03 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-1900gst:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-2533gst_firmware:*:*:*:*:*:*:*:* Versions up to 1.03 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-2533gst:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-2533gst2_firmware:*:*:*:*:*:*:*:* Versions up to 1.25 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-2533gst2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-2533gsta_firmware:*:*:*:*:*:*:*:* Versions up to 1.03 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-2533gsta:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-2533gst2sp_firmware:*:*:*:*:*:*:*:* Versions up to 1.25 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-2533gst2sp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:wrc-2533gst2-g_firmware:*:*:*:*:*:*:*:* Versions up to 1.25 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:wrc-2533gst2-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
- cpe:2.3:o:elecom:edwrc-2533gst2_firmware:*:*:*:*:*:*:*:* Versions up to 1.25 Vulnerable ·ELECOM CO.,LTD.
- cpe:2.3:h:elecom:edwrc-2533gst2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-20861
- 2026-10-03 Alias added: GHSA-cjfc-g68m-vj47
References
More ELECOM CO.,LTD. Edwrc-2533gst2 Firmware vulnerabilities
- TI-2021-04078 Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and… CVSS 3.1HIGH 8.8
- TI-2021-04074 Cross-site request forgery in ELECOM LAN routers CVSS 3.1HIGH 8.8
- TI-2022-09466 Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25… CVSS 3.1HIGH 8.8
- TI-2021-04077 OS command injection in ELECOM routers CVSS 3.1HIGH 8.0
- TI-2021-04073 OS command injection in ELECOM LAN routers CVSS 3.1HIGH 8.0
- TI-2021-04076 Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and… CVSS 3.1MEDIUM 4.3
Sources
- CVE-2021-20861 · CVE Program
- CVE-2021-20861 · NVD
- FIRST EPSS
- GHSA-cjfc-g68m-vj47 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences