Elecom Wrc-x1500gsa-B Firmware vulnerabilities

5 CVEs affecting Elecom Wrc-x1500gsa-B Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24465, published 2026-02-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-22550, published 2026-02-03. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary OS command execution.
CVE-2024-39607, published 2024-08-01. Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days. OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to…
CVE-2026-24465, published 2026-02-03. Critical severity, CVSS 9.3. EPSS: 0.8% chance of exploitation in the next 30 days. Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution.
CVE-2026-24449, published 2026-02-03. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.
CVE-2024-40883, published 2024-08-01. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be…