Configuration file tampering in ELECOM wireless LAN access point devices

CVE-2026-25107

What is CVE-2026-25107?

ELECOM wireless LAN access point devices are vulnerable due to the use of a hard-coded cryptographic key when creating backups of configuration files. This vulnerability allows an attacker, who has knowledge of the encryption key, to manipulate the configuration file. Victim administrators may unwittingly be influenced into utilizing a compromised configuration file, leading to potential unauthorized changes and network security risks.

References