CVE-2025-36519

MEDIUM

5.3

CVSS Score

Published: June 24, 2025 at 04:36 AM UTC

Updated: June 17, 2026 at 09:14 AM UTC

7 products affected across 1 vendorWRC-2533GST2WRC-1167GST2WRC-2533GS2-W

Using WRC-2533GST2 by ELECOM CO.,LTD.?

Get instant alerts when new vulnerabilities affect WRC-2533GST2 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.3

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2 and WRC-1167GST2. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

WRC-1167GS2-B · Elecom

60%

v ≤ 1.74

WRC-1167GS2H-B · Elecom

60%

v ≤ 1.74

WRC-1167GST2 · Elecom

60%

v ≤ 1.34

WRC-2533GS2-B · Elecom

60%

v ≤ 1.69

WRC-2533GS2-W · Elecom

60%

v ≤ 1.69

WRC-2533GS2V-B · Elecom

60%

v ≤ 1.69

WRC-2533GST2 · Elecom

60%

v ≤ 1.31

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

Source: [email protected]

https://jvn.jp/en/jp/JVN39435597/

Source: [email protected]

https://www.elecom.co.jp/news/security/20250624-01/

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.3MEDIUMjpcert

Vector?

Quick Info

StatusDEFERRED

CWE

CWE-434

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card