What’s Vulnerable › Vulnerabilities

CVE-2024-39607

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-01 · updated 2026-06-17
• Weakness: CWE-78

Description

OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command.

Affected products

• Elecom Wrc-X1500Gs-B Firmware: through 1.11
• Elecom Wrc-X1500Gsa-B Firmware: through 1.11
• Elecom Wrc-X6000Xs-G Firmware: through 1.11

References

• https://jvn.jp/en/jp/JVN06672778/
• https://www.elecom.co.jp/news/security/20240730-01/

Get alerted when CVE-2024-39607 or the next vulnerability affects your stack