Multiple vulnerabilities in ELECOM wireless LAN routers and access points
Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities.
CSIRTS triage
- What
- Multiple vulnerabilities exist in ELECOM wireless LAN routers and access points.
- Who is affected
- Users of ELECOM wireless LAN routers and access points.
- Urgency
- Remediation is necessary as these vulnerabilities could be exploited by attackers.
- Action
- Check for and apply firmware updates for the affected ELECOM devices.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Wireless LAN routers and access points
Get an email when a new Wireless LAN routers and access points advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://jvn.jp/en/jp/JVN24885537/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2024-345770.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all scored CVEs.
- Low exploitation riskCVE-2024-393000.48% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all scored CVEs.
- Low exploitation riskCVE-2024-424120.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
- Low exploitation riskCVE-2024-436890.94% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 57% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2024-34577 | coverage & exploitation status | NVD · CVE.org |
| CVE-2024-39300 | coverage & exploitation status | NVD · CVE.org |
| CVE-2024-42412 | coverage & exploitation status | NVD · CVE.org |
| CVE-2024-43689 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for ELECOM wireless LAN
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highCVE-2026-61376: ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerab…nvd · 2026-07-28
- highCVE-2026-59764: ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerab…nvd · 2026-07-28
- mediumCVE-2026-44387: ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting…nvd · 2026-07-28
- unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026)jvn · 2026-07-28
- unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access points (July 2026)jvn · 2026-07-28
More from JVN (Japan Vulnerability Notes)
- unknownPermissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-2026-07-31
- unknownSharp Network Scanner Tool insecure initial configuration2026-07-31
- unknownMultiple vulnerabilities in Sharp and Toshiba Tec MFPs2026-07-31
- unknownMultiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App2026-07-31
- unknownCSV file injection vulnerability in BaserCMS2026-07-31