CVE-2026-35506 — ELECOM CO.,LTD. / WRC-BE72XSD-B

CVE-2026-35506

ELECOM CO.,LTD. / WRC-BE72XSD-B PUBLISHED

Description (CNA)

ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed.

Affected (CNA)

Vendor / product	Versions
ELECOM CO.,LTD. / WRC-BE72XSD-B	affected v1.1.1 and earlier
ELECOM CO.,LTD. / WRC-BE72XSD-BA	affected v1.1.1 and earlier
ELECOM CO.,LTD. / WRC-BE65QSD-B	affected v1.1.0 and earlier
ELECOM CO.,LTD. / WRC-W702-B	affected v1.1.0 and earlier

CWE

CWE-78

References

https://www.elecom.co.jp/news/security/20260512-01/
https://jvn.jp/en/jp/JVN03037325/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.