Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-41427

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection Diagno

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection Diagnostics page. If a remote authenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WRC-X3000GS

  • v1.0.34 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GSA

  • v1.0.34 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GSN

  • v1.0.9 and earlieraffected

References