ELECOM Router Vulnerabilities: RCE, SSRF, File Upload (CVE-2025-36519, etc.)

Critical Vulnerability Information Vulnerability Overview CVE IDs: CVE-2025-36519, CVE-2025-41427, CVE-2025-48077, CVE-2025-48789, CVE-2025-48800 Affected Products: Multiple models and versions of ELECOM wireless LAN routers Vulnerability Details Unrestricted Dangerous File Type Upload (CVE-434) - CVSS Score: 5.3 (AV:N/AC:L/PR:L/UI:N/SC:N/SL:U/S:U/I:A/N/A) - CVSS Score: 4.3 (AV:N/AC:L/PR:L/UI:N/SC:N/SL:U/S:U/I:A/H/A:H) OS Command Injection in Connection Diagnosis Page (CVE-78) - CVSS Score: 8.7 (AV:N/AC:L/PR:L/UI:N/SC:H/SL:U/S:U/I:H/A:H) - CVSS Score: 8.6 (AV:N/AC:L/PR:L/UI:N/SC:H/SL:U/S:U/I:H/A:H) Stored Cross-Site Scripting in WebGUI (CVE-79) - CVSS Score: 4.8 (AV:N/AC:L/AT:N/PR:1/O:A/YVC:N/VN:V/AN:V/SC:S/SL:U/S:U/I:A/N/A) - CVSS Score: 3.4 (AV:N/AC:L/PR:L/UI:R/SC:L/OL:O/AN:V/SC:S/SL:U/S:U/I:A/N/A) OS Command Injection in Telnet Function (CVE-78) - CVSS Score: 9.3 (AV:N/AC:L/AT:N/PR:N/UI:Y/VC:H/VH:H/VA:H/SC:N/SL:U/S:U/I:A/N/A) - CVSS Score: 9.8 (AV:N/AC:L/PR:N/UI:N/SC:U/C:H/I:A/H) OS Command Injection in minigui SOAP Service (CVE-78) - CVSS Score: 9.3 (AV:N/AC:L/AT:N/PR:N/UI:Y/VC:H/VH:H/VA:H/SC:N/SL:U/S:U/I:A/N/A) - CVSS Score: 9.8 (AV:N/AC:L/PR:N/UI:N/SC:U/C:H/I:A/H) Impact Privileged users can upload malicious files to execute arbitrary code Remote authenticated attackers can execute arbitrary OS commands Users accessing the WebGUI may have arbitrary scripts executed in their browsers Remote unauthenticated attackers can execute arbitrary OS commands Remediation Update firmware to the latest version Discontinue use of unsupported products and apply the following mitigations: - Change WebGUI login password - Avoid visiting other websites - Close web browser after use - Delete stored WebGUI login passwords from browser References JPCERT/CC Addendum Vulnerability analysis provided by JPCERT/CC

Goal Reached Thanks to every supporter — we hit 100%!

ELECOM Router Vulnerabilities: RCE, SSRF, File Upload (CVE-2025-36519, etc.)