Approved changes feed: RSS · Atom

cpe:2.3:a:elecom_co.,ltd.:wrc-x3000gsn:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElecom Co.,Ltd. (1302573a-a329-5a27-962b-de365371eb8f)
ProductWrc X3000Gsn (926caa50-26f0-53d6-9f8c-ae666d7c8dc5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41427 vulnerable 2026-06-08 07:25:07.032585 Details available
HIGH (8.8)
WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection Diagnostics page. If a remote authenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed.
Published: 2025-06-24T04:37:09.818Z
Updated: 2025-06-25T12:42:52.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49695 vulnerable 2026-06-08 06:16:10.247920 Details available
OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command by sending a specially crafted request to the product.
Published: 2023-12-12T08:58:47.925Z
Updated: 2024-10-08T19:27:02.245Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.