← CVE Intelligence

CVE-2025-53472

ELECOM CO.,LTD. / WRC-BE36QS-B PUBLISHED

Description (CNA)

WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to WebGUI.

Affected (CNA)

Vendor / productVersions
ELECOM CO.,LTD. / WRC-BE36QS-Baffected v1.1.3 and earlier
ELECOM CO.,LTD. / WRC-W701-Baffected v1.1.3 and earlier

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.