Approved changes feed: RSS · Atom

cpe:2.3:a:elecom_co.,ltd.:wrc-x1800gsa-b:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElecom Co.,Ltd. (1302573a-a329-5a27-962b-de365371eb8f)
ProductWrc X1800Gsa B (a57edd45-9420-580a-a6b4-06027e19ac0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25107 vulnerable 2026-06-08 07:53:18.983147 Details available
MEDIUM (6.5)
ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of the product, and a victim administrator may be tricked to use a crafted configuration file.
Published: 2026-05-13T12:01:20.724Z
Updated: 2026-05-13T18:26:26.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22550 vulnerable 2026-06-08 07:51:13.049197 Details available
HIGH (7.2)
OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution.
Published: 2026-02-03T06:56:59.277Z
Updated: 2026-05-12T08:09:24.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20704 vulnerable 2026-06-08 07:49:12.439858 Details available
MEDIUM (4.3)
Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed.
Published: 2026-02-03T06:56:42.019Z
Updated: 2026-05-12T08:09:07.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40883 vulnerable 2026-06-08 06:43:53.463601 Details available
MEDIUM (6.5)
Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.
Published: 2024-08-01T01:18:01.801Z
Updated: 2026-05-12T08:10:08.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39607 vulnerable 2026-06-08 06:41:51.212345 Details available
MEDIUM (6.8)
OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command.
Published: 2024-08-01T01:17:00.982Z
Updated: 2026-05-12T08:09:55.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22372 vulnerable 2026-06-08 06:29:34.718538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39454 vulnerable 2026-06-08 06:09:37.509776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.