The ELECOM WRC-X1800GS-B device uses a hard-coded cryptographic key to encrypt backup configuration files. This design flaw allows an attacker with knowledge of the key to tamper with configuration files. If an administrator applies a crafted configuration file, the device could be misconfigured or compromised. The vulnerability affects firmware versions v1.19 and earlier. No vendor advisory or patch information is currently provided, and the vulnerability was published on 2026-05-13.

The vulnerability enables an attacker to modify encrypted configuration backups, potentially leading to unauthorized configuration changes if an administrator imports a maliciously altered file. This can impact the integrity of the device configuration but does not directly affect confidentiality or availability. The CVSS vector indicates no confidentiality impact, high integrity impact, and no availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should avoid importing configuration files from untrusted sources and verify the authenticity of backup files before applying them.