CVE Intelligence

ELECOM CO.,LTD. WRC-W702-B vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ELECOM CO.,LTD. WRC-W702-B: 3 record(s), with affected versions and fixes.

CVE-2026-42062 Critical · 9.8 CWE-78 May 13, 2026
OS Command Injection in ELECOM CO.,LTD. WRC-BE72XSD-B
ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authentication is required.
CVE-2026-40621 Critical · 9.8 CWE-288 May 13, 2026
ELECOM Wireless LAN Access Points: Authentication Bypass via Alternate Path (CWE-288)
ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication.
CVE-2026-35506 High · 7.2 CWE-78 May 13, 2026
OS Command Injection in ELECOM CO.,LTD. WRC-BE72XSD-B
ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed.