GCVE - cpe:2.3:a:elecom_co.,ltd.:wrc-1167gst2:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:elecom_co.,ltd.:wrc-1167gst2:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Elecom Co.,Ltd. (`1302573a-a329-5a27-962b-de365371eb8f`)
Product	Wrc 1167Gst2 (`40060d11-ca7c-517d-be3b-dae12308d2d9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-36519`	vulnerable	2026-06-08 07:21:01.825401	Details available MEDIUM (4.3) Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W, WRC-1167GST2, WRC-1167GS2-B, and WRC-1167GS2H-B. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product. Published: 2025-06-24T04:36:57.179Z Updated: 2026-02-03T07:57:26.251Z Open on db.gcve.eu Reference links https://www.elecom.co.jp/news/security/20250624-01/ https://jvn.jp/en/jp/JVN39435597/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34021`	vulnerable	2026-06-08 06:37:32.519037	Details available MEDIUM (6.8) Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafted file may be uploaded to the affected product by a logged-in user with an administrative privilege, resulting in an arbitrary OS command execution. Published: 2024-08-01T01:15:56.174Z Updated: 2026-05-12T08:11:19.282Z Open on db.gcve.eu Reference links https://www.elecom.co.jp/news/security/20240730-01/ https://jvn.jp/en/jp/JVN06672778/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-26258`	vulnerable	2026-06-08 06:31:25.966808	Details available MEDIUM (6.8) OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product. Published: 2024-04-04T00:03:41.930Z Updated: 2026-05-12T08:10:53.382Z Open on db.gcve.eu Reference links https://www.elecom.co.jp/news/security/20240326-01/ https://jvn.jp/en/vu/JVNVU95381465/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-25579`	vulnerable	2026-06-08 06:31:23.292381	Details available MEDIUM (6.8) OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B". Published: 2024-02-28T23:08:49.598Z Updated: 2026-02-03T07:57:43.515Z Open on db.gcve.eu Reference links https://www.elecom.co.jp/news/security/20240220-01/ https://jvn.jp/en/vu/JVNVU99444194/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23910`	vulnerable	2026-06-08 06:29:40.895475	Details available MEDIUM (4.3) Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit "WMC-2LX-B". Published: 2024-02-28T23:07:02.324Z Updated: 2025-04-22T15:54:59.591Z Open on db.gcve.eu Reference links https://www.elecom.co.jp/news/security/20240220-01/ https://jvn.jp/en/jp/JVN44166658/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-21798`	vulnerable	2026-06-08 06:27:36.667173	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.