CVE-2026-25107
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of the product, and a victim administrator may be tricked to use a crafted configuration file.
| Vendor | elecom co.,ltd. |
| Product | wrc-x1800gs-b |
| Published | May 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for elecom co.,ltd. wrc-x1800gs-b
Be the first to know when new medium vulnerabilities affecting elecom co.,ltd. wrc-x1800gs-b are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Versions
ELECOM CO.,LTD. / WRC-X1800GS-B
v1.19 and earlier
ELECOM CO.,LTD. / WRC-X3000GS2-B
v1.09 and earlier
ELECOM CO.,LTD. / WRC-X3000GS2-W
v1.09 and earlier
ELECOM CO.,LTD. / WRC-X3000GS2A-B
v1.09 and earlier
ELECOM CO.,LTD. / WRC-X3000GST2-B
v1.06 and earlier
ELECOM CO.,LTD. / WRC-X1800GSA-B
v1.19 and earlier
ELECOM CO.,LTD. / WRC-X1800GSH-B
v1.19 and earlier
ELECOM CO.,LTD. / WRC-X6000QS-G
v1.14 and earlier
ELECOM CO.,LTD. / WRC-X6000QSA-G
v1.14 and earlier
ELECOM CO.,LTD. / WRC-X6000XS-G
v1.12 and earlier
ELECOM CO.,LTD. / WRC-X6000XST-G
v1.16 and earlier
ELECOM CO.,LTD. / WRC-XE5400GS-G
1.13 and earlier
ELECOM CO.,LTD. / WRC-XE5400GSA-G
v1.13 and earlier