Elecom Wrc-x6000xs-G Firmware vulnerabilities

3 CVEs affecting Elecom Wrc-x6000xs-G Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-40883, published 2024-08-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-39607, published 2024-08-01. Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days. OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to…
CVE-2024-22372, published 2024-01-24. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted…
CVE-2024-40883, published 2024-08-01. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be…