Approved changes feed: RSS · Atom

cpe:2.3:o:elecom:wrc-x3000gs2-w_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorElecom (97cc14ae-cb7c-5e8d-9989-43185f8f67d0)
ProductWrc X3000Gs2 W Firmware (cb7d9b8a-689b-566e-b134-aac015895db5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-34577 vulnerable 2026-06-08 06:37:33.532575 Details available
Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.
Published: 2024-08-30T06:29:32.671Z
Updated: 2026-05-12T08:10:19.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43752 vulnerable 2026-06-08 06:12:37.781973 Details available
OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request.
Published: 2023-11-16T06:46:38.102Z
Updated: 2024-08-02T19:52:11.086Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.