Approved changes feed: RSS · Atom

cpe:2.3:a:elecom_co.,ltd.:wrc-x3000gs2-b:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElecom Co.,Ltd. (1302573a-a329-5a27-962b-de365371eb8f)
ProductWrc X3000Gs2 B (15c10407-7328-55e9-aa2b-a17c243bff3a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25107 vulnerable 2026-06-08 07:53:18.979368 Details available
MEDIUM (6.5)
ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of the product, and a victim administrator may be tricked to use a crafted configuration file.
Published: 2026-05-13T12:01:20.724Z
Updated: 2026-05-13T18:26:26.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22550 vulnerable 2026-06-08 07:51:13.039078 Details available
HIGH (7.2)
OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution.
Published: 2026-02-03T06:56:59.277Z
Updated: 2026-05-12T08:09:24.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20704 vulnerable 2026-06-08 07:49:12.434956 Details available
MEDIUM (4.3)
Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed.
Published: 2026-02-03T06:56:42.019Z
Updated: 2026-05-12T08:09:07.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40883 vulnerable 2026-06-08 06:43:53.465349 Details available
MEDIUM (6.5)
Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.
Published: 2024-08-01T01:18:01.801Z
Updated: 2026-05-12T08:10:08.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39607 vulnerable 2026-06-08 06:41:51.213639 Details available
MEDIUM (6.8)
OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command.
Published: 2024-08-01T01:17:00.982Z
Updated: 2026-05-12T08:09:55.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34577 vulnerable 2026-06-08 06:37:33.527114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22372 vulnerable 2026-06-08 06:29:34.720503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43752 vulnerable 2026-06-08 06:12:37.780545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.