What’s Vulnerable › Vulnerabilities

CVE-2025-36519

• Severity: medium (CVSS 5.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-24 · updated 2026-06-17
• Weakness: CWE-434

Description

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W, WRC-1167GST2, WRC-1167GS2-B, and WRC-1167GS2H-B. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

Affected products

• ELECOM CO.,LTD. WRC-1167GS2-B: through v1.74
• ELECOM CO.,LTD. WRC-1167GS2H-B: through v1.74
• ELECOM CO.,LTD. WRC-1167GST2: through v1.34
• ELECOM CO.,LTD. WRC-2533GS2-B: through v1.69
• ELECOM CO.,LTD. WRC-2533GS2-W: through v1.69
• ELECOM CO.,LTD. WRC-2533GS2V-B: through v1.69
• ELECOM CO.,LTD. WRC-2533GST2: through v1.31

References

• https://jvn.jp/en/jp/JVN39435597/
• https://www.elecom.co.jp/news/security/20250624-01/

Get alerted when CVE-2025-36519 or the next vulnerability affects your stack