Approved changes feed: RSS · Atom

cpe:2.3:a:elecom_co.,ltd.:wab-m1775-ps:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElecom Co.,Ltd. (1302573a-a329-5a27-962b-de365371eb8f)
ProductWab M1775 Ps (b3e77c40-25b0-54f7-a86d-c3207dbcbf67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44387 vulnerable 2026-09-16 04:33:45.758243 Details available
MEDIUM (5.2)
ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
Published: 2026-07-28T08:40:21.004Z
Updated: 2026-07-28T16:09:18.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61376 vulnerable 2026-09-16 04:32:44.969094 Details available
HIGH (7.2)
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Published: 2026-07-28T08:40:42.075Z
Updated: 2026-07-28T16:08:35.015Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43689 vulnerable 2026-06-08 06:45:52.863004 Details available
HIGH (8.8)
Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed.
Published: 2024-10-21T01:27:15.253Z
Updated: 2025-09-04T15:04:43.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42412 vulnerable 2026-06-08 06:43:56.642828 Details available
MEDIUM (6.1)
Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.
Published: 2024-08-30T06:29:27.606Z
Updated: 2025-09-19T17:23:20.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40072 vulnerable 2026-06-08 06:09:41.159382 Details available
OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.
Published: 2023-08-18T09:45:31.201Z
Updated: 2025-07-03T14:01:25.610Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.