CVE-2024-39607: Elecom Wrc-x1500gs-B Firmware

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command.

Affected products

• Elecom Wrc-x1500gs-B Firmware: up to and including 1.11
• Elecom Wrc-x1500gsa-B Firmware: up to and including 1.11
• Elecom Wrc-x6000xs-G Firmware: up to and including 1.11
• Elecom Co.,ltd Wrc-x1500gs-B: up to and including v1.11
• Elecom Co.,ltd Wrc-x1500gsa-B: up to and including v1.11
• Elecom Co.,ltd Wrc-x1800gs-B: up to and including v1.18
• Elecom Co.,ltd Wrc-x1800gsa-B: up to and including v1.18
• Elecom Co.,ltd Wrc-x1800gsh-B: up to and including v1.18
• Elecom Co.,ltd Wrc-x3000gs2-B: up to and including v1.08
• Elecom Co.,ltd Wrc-x3000gs2-W: up to and including v1.08
• Elecom Co.,ltd Wrc-x3000gs2a-B: up to and including v1.08
• Elecom Co.,ltd Wrc-x3000gst2-B: up to and including v1.06
• Elecom Co.,ltd Wrc-x6000qs-G: up to and including v1.13
• Elecom Co.,ltd Wrc-x6000qsa-G: up to and including v1.13
• Elecom Co.,ltd Wrc-x6000xs-G: up to and including v1.11
• Elecom Co.,ltd Wrc-x6000xst-G: up to and including v1.14
• Elecom Co.,ltd Wrc-XE5400GS-G: up to and including v1.12
• Elecom Co.,ltd Wrc-XE5400GSA-G: up to and including v1.12

Published 2024-08-01. Last modified 2026-06-17.