Read the docs
TI-2026-19720 Aliases CVE-2026-24465GHSA-wcrf-gh87-7f76

Stack-based buffer overflow in ELECOM CO.,LTD. WAB-S733IW2-PD

Priority MEDIUM 49CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00757 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ELECOM CO.,LTD.WAB-S733IW2-PDv5.5.00 and earlier versions—No fix listedCNA
ELECOM CO.,LTD.WAB-S733IW-ACv5.5.00 and earlier versions—No fix listedCNA
ELECOM CO.,LTD.WAB-S733IW-PDall versions—No fix listedCNA
ELECOM CO.,LTD.WAB-S300IW2-PDv5.5.00 and earlier versions—No fix listedCNA
ELECOM CO.,LTD.WAB-S300IW-ACv5.5.00 and earlier versions—No fix listedCNA
ELECOM CO.,LTD.WAB-S300IW-PDall versions—No fix listedCNA
  • WAB-S733IW2-PD VendorELECOM CO.,LTD. Affected v5.5.00 and earlier versions Fixed in — No fix listed CNA
  • WAB-S733IW-AC VendorELECOM CO.,LTD. Affected v5.5.00 and earlier versions Fixed in — No fix listed CNA
  • WAB-S733IW-PD VendorELECOM CO.,LTD. Affected all versions Fixed in — No fix listed CNA
  • WAB-S300IW2-PD VendorELECOM CO.,LTD. Affected v5.5.00 and earlier versions Fixed in — No fix listed CNA
  • WAB-S300IW-AC VendorELECOM CO.,LTD. Affected v5.5.00 and earlier versions Fixed in — No fix listed CNA
  • WAB-S300IW-PD VendorELECOM CO.,LTD. Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:o:elecom:wab-s300iw-pd_firmware:*:*:*:*:*:*:*:*all versionsVulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wab-s300iw-pd:*:*:*:*:*:*:*:*all versionsRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wab-s733iw-pd_firmware:*:*:*:*:*:*:*:*all versionsVulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wab-s733iw-pd:*:*:*:*:*:*:*:*all versionsRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wrc-x1500gsa-b_firmware:*:*:*:*:*:*:*:*before 1.13VulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wrc-x1500gsa-b:*:*:*:*:*:*:*:*all versionsRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wrc-x1500gs-b_firmware:*:*:*:*:*:*:*:*before 1.13VulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wrc-x1500gs-b:*:*:*:*:*:*:*:*all versionsRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wab-s300iw2-pd_firmware:*:*:*:*:*:*:*:*before 5.5.02VulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wab-s300iw2-pd:*:*:*:*:*:*:*:*all versionsRunning onELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wab-s300iw-pd_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wab-s300iw-pd:*:*:*:*:*:*:*:* Versions all versions Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wab-s733iw-pd_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wab-s733iw-pd:*:*:*:*:*:*:*:* Versions all versions Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wrc-x1500gsa-b_firmware:*:*:*:*:*:*:*:* Versions before 1.13 Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wrc-x1500gsa-b:*:*:*:*:*:*:*:* Versions all versions Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wrc-x1500gs-b_firmware:*:*:*:*:*:*:*:* Versions before 1.13 Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wrc-x1500gs-b:*:*:*:*:*:*:*:* Versions all versions Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wab-s300iw2-pd_firmware:*:*:*:*:*:*:*:* Versions before 5.5.02 Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wab-s300iw2-pd:*:*:*:*:*:*:*:* Versions all versions Running on ·ELECOM CO.,LTD.
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:elecom:wab-s300iw-ac_firmware:*:*:*:*:*:*:*:*before 5.5.02VulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wab-s300iw-ac:*:*:*:*:*:*:*:*all versionsRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wab-s733iw2-pd_firmware:*:*:*:*:*:*:*:*before 5.5.02VulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wab-s733iw2-pd:*:*:*:*:*:*:*:*all versionsRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wab-s733iw-ac_firmware:*:*:*:*:*:*:*:*before 5.5.02VulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wab-s733iw-ac:*:*:*:*:*:*:*:*all versionsRunning onELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wab-s300iw-ac_firmware:*:*:*:*:*:*:*:* Versions before 5.5.02 Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wab-s300iw-ac:*:*:*:*:*:*:*:* Versions all versions Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wab-s733iw2-pd_firmware:*:*:*:*:*:*:*:* Versions before 5.5.02 Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wab-s733iw2-pd:*:*:*:*:*:*:*:* Versions all versions Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wab-s733iw-ac_firmware:*:*:*:*:*:*:*:* Versions before 5.5.02 Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wab-s733iw-ac:*:*:*:*:*:*:*:* Versions all versions Running on ·ELECOM CO.,LTD.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-24465
  2. 2026-10-03 Alias added: GHSA-wcrf-gh87-7f76

References

Advisory 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences