Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

89 records

Vendor: ELECOM CO.,LTD. Clear all filters
TI-2026-44012 CVE-2026-61376 · GHSA-xp32-8g58-6x75

OS command injection in ELECOM CO.,LTD. WAB-M1775-PS

Priority MEDIUM 43

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01713 Published 2026-07-28 No fix listed CWE-78
TI-2026-42607 CVE-2026-59764 · GHSA-5rfp-gm74-mxcc

OS command injection in ELECOM CO.,LTD. WRC-X3000GS3-B

Priority MEDIUM 43

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01713 Published 2026-07-28 No fix listed CWE-78
TI-2026-32340 CVE-2026-44387 · GHSA-8p37-9vwg-qhv8

Cross-site scripting in ELECOM CO.,LTD. WAB-M1775-PS

Priority LOW 23

ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI.

CVSS 4.0MEDIUM 5.1 Adjacent network No auth User interaction EPSS 0.00236 Published 2026-07-28 No fix listed CWE-79
TI-2026-31139 CVE-2026-42948 · GHSA-2xgj-qg94-hr45

Cross-site scripting in ELECOM CO.,LTD. WAB-BE187-M

Priority LOW 21

Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00161 Published 2026-05-13 No fix listed CWE-79
TI-2026-30435 CVE-2026-42062 · GHSA-mh6j-mmrp-wqc9

OS command injection in ELECOM CO.,LTD. WRC-BE72XSD-B

Priority MEDIUM 51

ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01633 Published 2026-05-13 No fix listed CWE-78
TI-2026-29353 CVE-2026-40621 · GHSA-9v2f-mjhv-cgq5

Authentication bypass in ELECOM CO.,LTD. WRC-BE72XSD-B

Priority MEDIUM 49

ELECOM wireless LAN access point devices do not require authentication to access some specific URLs.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00491 Published 2026-05-13 No fix listed CWE-288
TI-2026-27627 CVE-2026-35506 · GHSA-p3g4-xxhh-7c6g

OS command injection in ELECOM CO.,LTD. WRC-BE72XSD-B

Priority MEDIUM 42

ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01308 Published 2026-05-13 No fix listed CWE-78
TI-2025-33417 CVE-2025-53472 · GHSA-p7jm-pv37-vmrp

OS command injection in ELECOM CO.,LTD. WRC-BE36QS-B

Priority MEDIUM 41

WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01021 Published 2025-07-22 No fix listed CWE-78
TI-2025-31040 CVE-2025-48890 · GHSA-8j76-7m45-w5rh

OS command injection in ELECOM CO.,LTD. WRH-733GBK

Priority MEDIUM 52

WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in miniigd SOAP service.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02158 Published 2025-06-24 No fix listed CWE-78
TI-2025-28456 CVE-2025-43879 · GHSA-pg9g-gj66-h46r

OS command injection in ELECOM CO.,LTD. WRH-733GBK

Priority MEDIUM 52

WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet function.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02158 Published 2025-06-24 No fix listed CWE-78
TI-2025-27591 CVE-2025-41427 · GHSA-7pgx-3wpq-wj9f

OS command injection in ELECOM CO.,LTD. WRC-X3000GS

Priority MEDIUM 42

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection Diagnostics page.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00989 Published 2025-06-24 No fix listed CWE-78
TI-2025-24859 CVE-2025-36519 · GHSA-hrgx-4g6p-h98r

Unrestricted file upload in ELECOM CO.,LTD. WRC-2533GST2

Priority LOW 24

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W, WRC-1167GST2, WRC-1167GS2-B, and WRC-1167GS2H-B.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00333 Published 2025-06-24 No fix listed CWE-434
TI-2024-26257 CVE-2024-39300 · GHSA-w4qw-whg8-4fjc

Missing authentication in ELECOM CO.,LTD. WAB-I1750-PS

Priority LOW 38

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00481 Published 2024-08-30 No fix listed CWE-306
TI-2024-22878 CVE-2024-34577 · GHSA-jvr7-jmp5-9485

Cross-site scripting in ELECOM CO.,LTD. WRC-X3000GS2-B

Priority LOW 27

Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00251 Published 2024-08-30 No fix listed CWE-79
Load more