Vendor CVEs

ELECOM CO.,LTD.

All CVEs

79 total · sorted by risk

CVE	Vendor / Product	CVSS	EPSS	Published	Description
CVE-2022-21799	ELECOM CO.,LTD. WRC-300FEBK	—	0.00	Feb 8, 2022	Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitrary script via unspecified vectors.
CVE-2022-21173	ELECOM CO.,LTD. WRH-300BK3	—	0.00	Feb 8, 2022	Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1.05 and earlier, WRH-300BK3-S firmware v1.05 and earlier, WRH-300DR3-S firmware v1.05 and earlier, WRH-300LB3-S firmware v1.05 and earlier, WRH-300PN3-S…
CVE-2021-20864	ELECOM CO.,LTD. WRC-2533GST2	—	0.01	Dec 1, 2021	Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20863	ELECOM CO.,LTD. WRC-2533GST2	—	0.01	Dec 1, 2021	OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03…
CVE-2021-20862	ELECOM CO.,LTD. WRC-2533GST2	—	0.00	Dec 1, 2021	Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20861	ELECOM CO.,LTD. WRC-2533GST2	—	0.00	Dec 1, 2021	Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20860	ELECOM CO.,LTD. WRC-1167GST2A	—	0.01	Dec 1, 2021	Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior,…
CVE-2021-20859	ELECOM CO.,LTD. WRC-2533GST2	—	0.01	Dec 1, 2021	ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware…
CVE-2021-20858	ELECOM CO.,LTD. WRC-2533GHBK-I	—	0.01	Dec 1, 2021	Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20857	ELECOM CO.,LTD. WRC-2533GHBK-I	—	0.01	Dec 1, 2021	Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20856	ELECOM CO.,LTD. WRH-733GBK	—	0.01	Dec 1, 2021	Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20855	ELECOM CO.,LTD. WRH-733GBK	—	0.01	Dec 1, 2021	Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20854	ELECOM CO.,LTD. WRH-733GBK	—	0.00	Dec 1, 2021	ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20853	ELECOM CO.,LTD. WRH-733GBK	—	0.00	Dec 1, 2021	ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20852	ELECOM CO.,LTD. WRH-733GBK	—	0.00	Dec 1, 2021	Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors.
CVE-2021-20739	ELECOM CO.,LTD. WRC-300FEBK	—	0.01	Jul 7, 2021	WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
CVE-2021-20738	ELECOM CO.,LTD. WRC-1167FS-W	—	0.00	Jul 7, 2021	WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors.
CVE-2021-20650	ELECOM CO.,LTD. NCC-EWF100RMWH2	—	0.01	Feb 12, 2021	Cross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be…
CVE-2021-20648	ELECOM CO.,LTD. WRC-300FEBK	—	0.00	Feb 12, 2021	ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20649	ELECOM CO.,LTD. WRC-300FEBK	—	0.00	Feb 12, 2021	ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication response. As a result, an arbitrary OS command may be executed on the affected device.
CVE-2021-20647	ELECOM CO.,LTD. WRC-300FEBK	—	0.01	Feb 12, 2021	Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be…
CVE-2021-20646	ELECOM CO.,LTD. WRC-300FEBK	—	0.01	Feb 12, 2021	Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be…
CVE-2021-20645	ELECOM CO.,LTD. WRC-300FEBK	—	0.01	Feb 12, 2021	Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
CVE-2021-20644	ELECOM CO.,LTD. WRC-1467GHBK-A	—	0.01	Feb 12, 2021	ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page.
CVE-2021-20643	ELECOM CO.,LTD. LD-PS/U1	—	0.01	Feb 12, 2021	Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a specially crafted request.
CVE-2021-20641	ELECOM CO.,LTD. LOGITEC LAN-W300N/PGRB	—	0.01	Feb 12, 2021	Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted.
CVE-2021-20642	ELECOM CO.,LTD. Lan W300n/rs	—	0.01	Feb 12, 2021	Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL.
CVE-2021-20640	ELECOM CO.,LTD. LOGITEC LAN-W300N/PGRB	—	0.01	Feb 12, 2021	Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors.
CVE-2020-5634	ELECOM CO.,LTD. WRC-2533GST2	—	0.01	Oct 6, 2020	ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10) allow an attacker on the same network segment to execute arbitrary…

CVE-2022-21799Feb 8, 2022
ELECOM CO.,LTD.
WRC-300FEBK
risk 0.00cvss —epss 0.00
Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitrary script via unspecified vectors.
CVE-2022-21173Feb 8, 2022
ELECOM CO.,LTD.
WRH-300BK3
risk 0.00cvss —epss 0.00
Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1.05 and earlier, WRH-300BK3-S firmware v1.05 and earlier, WRH-300DR3-S firmware v1.05 and earlier, WRH-300LB3-S firmware v1.05 and earlier, WRH-300PN3-S…
CVE-2021-20864Dec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.00cvss —epss 0.01
Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20863Dec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.00cvss —epss 0.01
OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03…
CVE-2021-20862Dec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.00cvss —epss 0.00
Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20861Dec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.00cvss —epss 0.00
Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware…
CVE-2021-20860Dec 1, 2021
ELECOM CO.,LTD.
WRC-1167GST2A
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior,…
CVE-2021-20859Dec 1, 2021
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.00cvss —epss 0.01
ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware…
CVE-2021-20858Dec 1, 2021
ELECOM CO.,LTD.
WRC-2533GHBK-I
risk 0.00cvss —epss 0.01
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20857Dec 1, 2021
ELECOM CO.,LTD.
WRC-2533GHBK-I
risk 0.00cvss —epss 0.01
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20856Dec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.00cvss —epss 0.01
Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20855Dec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.00cvss —epss 0.01
Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20854Dec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.00cvss —epss 0.00
ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20853Dec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.00cvss —epss 0.00
ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20852Dec 1, 2021
ELECOM CO.,LTD.
WRH-733GBK
risk 0.00cvss —epss 0.00
Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors.
CVE-2021-20739Jul 7, 2021
ELECOM CO.,LTD.
WRC-300FEBK
risk 0.00cvss —epss 0.01
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
CVE-2021-20738Jul 7, 2021
ELECOM CO.,LTD.
WRC-1167FS-W
risk 0.00cvss —epss 0.00
WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors.
CVE-2021-20650Feb 12, 2021
ELECOM CO.,LTD.
NCC-EWF100RMWH2
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be…
CVE-2021-20648Feb 12, 2021
ELECOM CO.,LTD.
WRC-300FEBK
risk 0.00cvss —epss 0.00
ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVE-2021-20649Feb 12, 2021
ELECOM CO.,LTD.
WRC-300FEBK
risk 0.00cvss —epss 0.00
ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication response. As a result, an arbitrary OS command may be executed on the affected device.
CVE-2021-20647Feb 12, 2021
ELECOM CO.,LTD.
WRC-300FEBK
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be…
CVE-2021-20646Feb 12, 2021
ELECOM CO.,LTD.
WRC-300FEBK
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be…
CVE-2021-20645Feb 12, 2021
ELECOM CO.,LTD.
WRC-300FEBK
risk 0.00cvss —epss 0.01
Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
CVE-2021-20644Feb 12, 2021
ELECOM CO.,LTD.
WRC-1467GHBK-A
risk 0.00cvss —epss 0.01
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page.
CVE-2021-20643Feb 12, 2021
ELECOM CO.,LTD.
LD-PS/U1
risk 0.00cvss —epss 0.01
Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a specially crafted request.
CVE-2021-20641Feb 12, 2021
ELECOM CO.,LTD.
LOGITEC LAN-W300N/PGRB
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted.
CVE-2021-20642Feb 12, 2021
ELECOM CO.,LTD.
Lan W300n/rs
risk 0.00cvss —epss 0.01
Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL.
CVE-2021-20640Feb 12, 2021
ELECOM CO.,LTD.
LOGITEC LAN-W300N/PGRB
risk 0.00cvss —epss 0.01
Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors.
CVE-2020-5634Oct 6, 2020
ELECOM CO.,LTD.
WRC-2533GST2
risk 0.00cvss —epss 0.01
ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10) allow an attacker on the same network segment to execute arbitrary…

Page 2 of 2