{"id":"CVE-2024-26258","aliases":["EUVD-2024-23534","GHSA-93jv-mjxf-3w6q"],"status":"published","title":"OS command injection vulnerability in WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and...","description":"OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.","severity":{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00689,"percentile":0.5304,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2024-04-04T00:03:41Z","modified":"2026-06-17T07:17:29Z","products":[{"vendor":"elecom","product":"wrc-g01-w_firmware"},{"vendor":"elecom","product":"wrc-x3200gst3-b_firmware"},{"vendor":"elecom co.,ltd.","product":"wmc-2lx-b"},{"vendor":"elecom co.,ltd.","product":"wmc-x1800gst-b"},{"vendor":"elecom co.,ltd.","product":"wrc-1167gst2"},{"vendor":"elecom co.,ltd.","product":"wrc-2533gst2"},{"vendor":"elecom co.,ltd.","product":"wrc-g01-w"},{"vendor":"elecom co.,ltd.","product":"wrc-x3200gst3-b"},{"vendor":"elecom co.,ltd.","product":"wsc-x1800gs-b"}],"references":[{"url":"https://www.elecom.co.jp/news/security/20240326-01/","tags":["x_transferred"]},{"url":"https://jvn.jp/en/vu/JVNVU95381465/","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-26258"},{"url":"https://jvn.jp/en/vu/JVNVU95381465"},{"url":"https://www.elecom.co.jp/news/security/20240326-01"},{"url":"https://github.com/advisories/GHSA-93jv-mjxf-3w6q"}],"sources":{"cve":[{"id":"CVE-2024-26258","description":"OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.","status":"published","published":"2024-04-04T00:03:41.93Z","modified":"2026-05-12T08:10:53.382Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:33:59.512321Z"}],"euvd":[{"id":"EUVD-2024-23534","description":"OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.","status":"published","published":"2024-04-04T00:03:41Z","modified":"2026-05-12T08:10:53Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:04:38.653286Z"}],"ghsa":[{"id":"GHSA-93jv-mjxf-3w6q","title":"OS command injection vulnerability in WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and...","description":"OS command injection vulnerability in WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and earlier allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.","status":"published","published":"2024-04-04T00:33:13Z","modified":"2024-07-03T18:34:06Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:57:33.79017Z"}],"nvd":[{"id":"CVE-2024-26258","description":"OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.","status":"published","published":"2024-04-04T00:15:07.047Z","modified":"2026-06-17T07:17:29.187Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:09:48.152273Z"}]}}