Skip to content
Noroxi

elecom records

69 published records for vendor elecom.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
14
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

69 records
  • CVE-2023-37567
    40Plan

    Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary

    CriticalCVSS 9.8No exploitEPSS 2%

    elecom · wrc-1167ghbk3-a firmwareJul 12, 2023

  • CVE-2023-40069
    39Monitor

    OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS c

    CriticalCVSS 9.8No exploitEPSS 1%

    elecom · wrc-f1167acf firmwareAug 18, 2023

  • CVE-2023-39454
    39Monitor

    Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.

    CriticalCVSS 9.8No exploitEPSS 1%

    elecom · wrc-x1800gs-b firmwareAug 18, 2023

  • CVE-2024-43689
    39Monitor

    Stack-based buffer overflow vulnerability exists in ELECOM wireless access points.

    CriticalCVSS 9.8No exploitEPSS 1%

    elecom · wab-i1750-ps firmwareOct 20, 2024

  • CVE-2023-32626
    39Monitor

    Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in

    CriticalCVSS 9.8No exploitEPSS 1%

    elecom · lan-w300n\/rs firmwareAug 18, 2023

  • CVE-2023-35991
    39Monitor

    Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain man

    CriticalCVSS 9.8No exploitEPSS 1%

    elecom · lan-wh300andgpe firmwareAug 18, 2023

  • CVE-2021-20651
    37Monitor

    Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an ex

    CriticalCVSS 9.1No exploitEPSS 2%

    elecom · file managerFeb 12, 2021

  • CVE-2026-24465
    37Monitor

    Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices.

    CriticalCVSS 9.3No exploitEPSS 1%

    elecom · wab-s300iw-pd firmwareFeb 3, 2026

  • CVE-2023-40072
    36Monitor

    OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS comma

    HighCVSS 8.8No exploitEPSS 2%

    elecom · wab-s600-ps firmwareAug 18, 2023

  • CVE-2026-22550
    35Monitor

    OS command injection vulnerability exists in ELECOM wireless LAN products.

    HighCVSS 8.6No exploitEPSS 2%

    elecom · wrc-x1500gsa-b firmwareFeb 3, 2026

  • CVE-2023-39455
    35Monitor

    OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending

    HighCVSS 8.8No exploitEPSS 1%

    elecom · wrc-600ghbk-a firmwareAug 18, 2023

  • CVE-2023-39944
    35Monitor

    OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product

    HighCVSS 8.8No exploitEPSS 1%

    elecom · wrc-f1167acf firmwareAug 18, 2023

  • CVE-2024-25568
    35Monitor

    OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS

    HighCVSS 8.8No exploitEPSS 1%

    elecom co.,ltd. · wrc-x3200gst3-bApr 3, 2024

  • CVE-2020-5634
    35Monitor

    ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware vers

    HighCVSS 8.8No exploitEPSS 1%

    elecom · wrc-2533gst2 firmwareOct 6, 2020

  • CVE-2023-39445
    35Monitor

    Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execu

    HighCVSS 8.8No exploitEPSS 1%

    elecom · wrc-1467ghbk-a firmwareAug 18, 2023

  • CVE-2021-20860
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 a

    HighCVSS 8.8No exploitEPSS 1%

    elecom · wrc-1167gst2 firmwareNov 30, 2021

  • CVE-2021-20864
    35Monitor

    Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-

    HighCVSS 8.8No exploitEPSS 1%

    elecom · wrc-1167gst2 firmwareNov 30, 2021

  • CVE-2021-20739
    35Monitor

    WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all v

    HighCVSS 8.8No exploitEPSS 1%

    elecom · wrc-300febk firmwareJul 7, 2021

  • CVE-2021-20861
    35Monitor

    Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior,

    HighCVSS 8.8No exploitEPSS 0%

    elecom · wrc-1167gst2 firmwareNov 30, 2021

  • CVE-2022-21173
    35Monitor

    Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1.05 and earlier, WRH-

    HighCVSS 8.8No exploitEPSS 0%

    elecom · wrh-300bk3 firmwareFeb 8, 2022

  • CVE-2022-25915
    35Monitor

    Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior,

    HighCVSS 8.8No exploitEPSS 0%

    elecom · wrc-1167gst2 firmwareMar 31, 2022

  • CVE-2023-38132
    35Monitor

    LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated

    HighCVSS 8.8No exploitEPSS 0%

    elecom · lan-w451ngr firmwareAug 18, 2023

  • CVE-2023-37562
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.

    HighCVSS 8.8No exploitEPSS 0%

    elecom · wtc-c1167gc-b firmwareJul 12, 2023

  • CVE-2024-23910
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated att

    HighCVSS 8.8No exploitEPSS 0%

    elecom · wrc-1167gs2-b firmwareFeb 28, 2024

  • CVE-2024-40883
    35Monitor

    Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers.

    HighCVSS 8.8No exploitEPSS 0%

    elecom · wrc-2533gs2-b firmwareJul 31, 2024