Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-26258

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafte

Description

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WRC-X3200GST3-B

  • v1.25 and earlieraffected

ELECOM CO.,LTD. WRC-G01-W

  • v1.24 and earlieraffected

ELECOM CO.,LTD. WRC-1167GST2

  • v1.32 and earlieraffected

ELECOM CO.,LTD. WRC-2533GST2

  • v1.30 and earlieraffected

ELECOM CO.,LTD. WMC-2LX-B

  • v1.42 and earlieraffected

ELECOM CO.,LTD. WMC-X1800GST-B

  • v1.42 and earlieraffected

ELECOM CO.,LTD. WSC-X1800GS-B

  • v1.42 and earlieraffected

References