Approved changes feed: RSS · Atom

cpe:2.3:a:elecom_co.,ltd.:wrc-be72xsd-ba:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElecom Co.,Ltd. (1302573a-a329-5a27-962b-de365371eb8f)
ProductWrc Be72Xsd Ba (76906246-7b10-58c7-a0a9-5ad8c0d6a02e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42062 vulnerable 2026-06-08 08:03:15.896622 Details available
CRITICAL (9.8)
ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authentication is required.
Published: 2026-05-13T12:01:52.127Z
Updated: 2026-05-13T15:07:12.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40621 vulnerable 2026-06-08 08:01:20.892685 Details available
CRITICAL (9.8)
ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication.
Published: 2026-05-13T12:01:41.873Z
Updated: 2026-05-13T15:07:44.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-35506 vulnerable 2026-06-08 07:59:14.064119 Details available
HIGH (7.2)
ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed.
Published: 2026-05-13T12:01:30.798Z
Updated: 2026-05-13T15:19:45.905Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.