632 matches found
CVE-2026-25107: Use of Hard-coded Cryptographic Key
ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of the product, and a victim administrator may be tricked to use a crafted configuration file...
CVE-2026-40621: Authentication Bypass Using an Alternate Path or Channel
ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication...
PT-2026-40596
ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping ip addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed...
ELECOM多款产品 操作系统命令注入漏洞
ELECOM WRC, etc. are products of the Japanese ELECOM company. ELECOM WRC is a home-use network camera. ELECOM WRC-X1500GSA-B is a wireless router. ELECOM WRC-BE36QS-B is also a wireless router. Several ELECOM products have vulnerabilities related to OS command injection. These vulnerabilities ste...
PT-2026-40600
ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the user's web browser may become broken...
CVE-2026-42961: Use of Invariant Value in Dynamically Changing Context
ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to do unintended operations...
CVE-2026-42948: Improper Neutralization of Input During Web Page Generation
Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input malicious data, an arbitrary script may be executed in another administrative user's web browser...
Multiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026)
Overview Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Use of Hard-coded Cryptographic Key in creating backup of configuration files CWE-321 - CVE-2026-25107 OS command injection in processing of pingipaddr parameter...
EUVD-2026-10002
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution...
CVE-2026-24465
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution...
CVE-2026-24465
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution...
CVE-2026-24465
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution...
EUVD-2026-5273
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution...
CVE-2026-24465
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution...
CVE-2026-24465
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution...
CVE-2026-24465
Summary of CVE-2026-24465 (ELECOM wireless LAN access points): A stack-based buffer overflow exists in ELECOM wireless LAN access point devices, allowing a crafted packet to potentially execute arbitrary code. The vulnerability is described consistently across multiple sources (NVD/Red Hat/CIRCL/...
Multiple vulnerabilities in ELECOM wireless LAN products
Overview Wireless LAN products provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Cross-site request forgery CWE-352 - CVE-2026-20704 OS command injection CWE-78 - CVE-2026-22550 Use of weak credentials CWE-1391 - CVE-2026-24449 Stack-based buffer overflow CWE-121 -...
PT-2026-6195
Name of the Vulnerable Software and Affected Versions ELECOM wireless LAN access point devices affected versions not specified Description A stack-based buffer overflow exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution. Recommendations At th...
ELECOM WRC-X1500GS-B和ELECOM WRC-X1500GSA-B 跨站请求伪造漏洞
ELECOM WRC-X1500GS-B and ELECOM WRC-X1500GSA-B are wireless routers produced by the Japanese company ELECOM. Both devices have a vulnerability related to cross-site request forgery. This vulnerability stems from cross-site request forgery attacks, which may cause unexpected behaviors when logged-...
ELECOM WRC-X1500GS-B和ELECOM WRC-X1500GSA-B 安全漏洞
ELECOM WRC-X1500GS-B and ELECOM WRC-X1500GSA-B are wireless routers produced by the Japanese company ELECOM. Both devices have security vulnerabilities, where the initial password can be easily calculated from system information...