Buffer overflow

Buffer overflow vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors...

Design/Logic Flaw

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and...

Improper access control

Improper access control vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

CVE-2021-20861

CVE-2021-20861 affects ELECOM LAN routers and is described as an improper access control vulnerability that lets a network-adjacent authenticated attacker bypass restrictions and access the device management screen via unspecified vectors. Multiple sources (NVD, Red Hat advisory, CVE list, JVN, C...

CVE-2021-20861

Improper access control vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

CVE-2021-20860

Cross-site request forgery CSRF vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and...

CVE-2021-20860

CVE-2021-20860 is a CSRF vulnerability in ELECOM LAN routers that allows a remote authenticated attacker to hijack administrator authentication via a crafted page. Affected devices span multiple ELECOM families (e.g., WRC-1167GST2, WRC-2533-series, WRC-1750GS, WRC-1900GST, and related EDWRC/WRH/W...

CVE-2021-20859

ELECOM CVE-2021-20859 describes an OS command injection vulnerability affecting numerous ELECOM LAN routers, allowing a network-adjacent authenticated attacker to execute arbitrary OS commands via unspecified vectors. The affected models/firmware ranges include WRC-1167GST2, WRC-1167GST2A/H, WRC-...

CVE-2021-20859

ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior,...

CVE-2021-20858

CVE-2021-20858 is a cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and earlier. The issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors, potentially affecting the logged-in user’s browser session. The linked doc...

CVE-2021-20858

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20857

CVE-2021-20857 affects ELECOM WRC-2533GHBK-I, firmware 1.20 and earlier. Described as a Cross-site scripting (CWE-79) vulnerability in the router’s web UI that enables a remote authenticated attacker to inject arbitrary scripts via unspecified vectors. Impact reported: arbitrary script execution ...

CVE-2021-20857

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20856

Cross-site scripting vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20856

CVE-2021-20856 is a Cross-site scripting (CWE-79) vulnerability in ELECOM LAN routers. The affected devices are WRH-733GBK firmware v1.02.9 and earlier and WRH-733GWH firmware v1.02.9 and earlier. The vulnerability allows a remote authenticated attacker to inject an arbitrary script via unspecifi...

CVE-2021-20855

Cross-site scripting vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20855

CVE-2021-20855 is an XSS vulnerability in ELECOM LAN routers. It affects WRH-733GBK (firmware v1.02.9 and earlier) and WRH-733GWH (v1.02.9 and earlier). The issue allows a remote authenticated attacker to inject arbitrary script via unspecified vectors, potentially impacting users’ browsers. Affe...

CVE-2021-20854

CVE-2021-20854 concerns ELECOM LAN routers where a network-adjacent attacker with administrative privileges can execute arbitrary OS commands via unspecified vectors. The primary affected devices documented include WRH-733GBK firmware v1.02.9 and earlier and WRH-733GWH firmware v1.02.9 and earlie...