High severity8.8NVD Advisory· Published Apr 4, 2024· Updated Apr 15, 2026

CVE-2024-25568

Description

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W v1.24 and earlier, and WMC-X1800GST-B v1.41 and earlier. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ELECOM CO.,LTD./WRC-X3200GST3-Bllm-create
Range: <=1.25
ELECOM CO.,LTD./WRC-G01-Wllm-create
Range: <=1.24
ELECOM CO.,LTD./Wmc X1800gst Bllm-fuzzy
Range: <=1.41

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU95381465/nvd
www.elecom.co.jp/news/security/20240326-01/nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000