CVE-2024-25579: Elecom Wmc-x1800gst-B Firmware

Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days.

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".

Affected products

• Elecom Wmc-x1800gst-B Firmware: up to and including 1.41
• Elecom Wrc-1167gs2-B Firmware: up to and including 1.67
• Elecom Wrc-1167gs2h-B Firmware: up to and including 1.67
• Elecom Wrc-1167gst2 Firmware: up to and including 1.32
• Elecom Wrc-2533gs2-B Firmware: up to and including 1.62
• Elecom Wrc-2533gs2-W Firmware: up to and including 1.62
• Elecom Wrc-2533gs2v-B Firmware: up to and including 1.62
• Elecom Wrc-2533gst2 Firmware: up to and including 1.30
• Elecom Wrc-g01-W Firmware: up to and including 1.24
• Elecom Wrc-x3200gst3-B Firmware: up to and including 1.25
• Elecom Co.,ltd Wmc-2lx2-B: version v1.16 only
• Elecom Co.,ltd Wmc-x1800gst-B: up to and including v1.41
• Elecom Co.,ltd Wmc-x1800gst2-B: version v1.16 only
• Elecom Co.,ltd Wrc-1167gs2-B: up to and including v1.67
• Elecom Co.,ltd Wrc-1167gs2h-B: up to and including v1.67
• Elecom Co.,ltd Wrc-1167gst2: up to and including v1.32
• Elecom Co.,ltd Wrc-2533gs2-B: up to and including v1.62
• Elecom Co.,ltd Wrc-2533gs2-W: up to and including v1.62
• Elecom Co.,ltd Wrc-2533gs2v-B: up to and including v1.62
• Elecom Co.,ltd Wrc-2533gst2: up to and including v1.30
• Elecom Co.,ltd Wrc-g01-W: up to and including v1.24
• Elecom Co.,ltd Wrc-x3200gst3-B: up to and including v1.25
• Elecom Co.,ltd Wsc-x1800gs2-B: version v1.16 only

Published 2024-02-28. Last modified 2026-06-17.