Approved changes feed: RSS · Atom

cpe:2.3:o:elecom:wrc-x1500gsa-b_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorElecom (97cc14ae-cb7c-5e8d-9989-43185f8f67d0)
ProductWrc X1500Gsa B Firmware (80fcf5b1-1932-587f-8d8d-d42d70da9d4f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-24465 vulnerable 2026-06-08 07:51:17.718103 Details available
CRITICAL (9.8)
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution.
Published: 2026-02-03T06:57:51.704Z
Updated: 2026-02-03T15:47:24.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24449 vulnerable 2026-06-08 07:51:17.691426 Details available
MEDIUM (4.6)
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.
Published: 2026-02-03T06:57:20.505Z
Updated: 2026-02-03T15:54:07.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22550 vulnerable 2026-06-08 07:51:13.053319 Details available
HIGH (7.2)
OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution.
Published: 2026-02-03T06:56:59.277Z
Updated: 2026-05-12T08:09:24.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40883 vulnerable 2026-06-08 06:43:53.482399 Details available
MEDIUM (6.5)
Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.
Published: 2024-08-01T01:18:01.801Z
Updated: 2026-05-12T08:10:08.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39607 vulnerable 2026-06-08 06:41:51.209130 Details available
MEDIUM (6.8)
OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command.
Published: 2024-08-01T01:17:00.982Z
Updated: 2026-05-12T08:09:55.122Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.