Elecom Co.,ltd Wrc-XE5400GS-G vulnerabilities

3 CVEs affecting Elecom Co.,ltd Wrc-XE5400GS-G, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-25107, published 2026-05-13.

More from Elecom Co.,ltd.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-39607, published 2024-08-01. Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days. OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to…
• CVE-2026-20704, published 2026-02-03. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed.
• CVE-2026-25107, published 2026-05-13. Medium severity, CVSS 6.9. EPSS: 0.1% chance of exploitation in the next 30 days. ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of…