Elecom Co.,ltd Wrc-BE36QS-B vulnerabilities

2 CVEs affecting Elecom Co.,ltd Wrc-BE36QS-B, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-53472, published 2025-07-22.

More from Elecom Co.,ltd.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-53472, published 2025-07-22. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI. If exploited, an arbitrary OS command may be…
• CVE-2025-46267, published 2025-07-22. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B. If exploited, the product's hidden debug function may be enabled by a remote attacker who can log in to WebGUI.