Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-36519

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W, WRC-1167GST

Description

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W, WRC-1167GST2, WRC-1167GS2-B, and WRC-1167GS2H-B. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WRC-2533GST2

  • v1.31 and earlieraffected

ELECOM CO.,LTD. WRC-1167GST2

  • v1.34 and earlieraffected

ELECOM CO.,LTD. WRC-2533GS2V-B

  • v1.69 and earlieraffected

ELECOM CO.,LTD. WRC-2533GS2-B

  • v1.69 and earlieraffected

ELECOM CO.,LTD. WRC-2533GS2-W

  • v1.69 and earlieraffected

ELECOM CO.,LTD. WRC-1167GS2-B

  • v1.74 and earlieraffected

ELECOM CO.,LTD. WRC-1167GS2H-B

  • v1.74 and earlieraffected

References