CVE-2025-36519

N/A

Description

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W, WRC-1167GST2, WRC-1167GS2-B, and WRC-1167GS2H-B. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

CVE Details

CVSS v3.1 ScoreN/A

Published6/24/2025

Last Modified2/3/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-434

References

https://jvn.jp/en/jp/JVN39435597/(vultures@jpcert.or.jp)

https://www.elecom.co.jp/news/security/20250624-01/(vultures@jpcert.or.jp)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.