Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-23910

Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of ad

Description

Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit "WMC-2LX-B".

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WRC-1167GS2-B

  • v1.67 and earlieraffected

ELECOM CO.,LTD. WRC-1167GS2H-B

  • v1.67 and earlieraffected

ELECOM CO.,LTD. WRC-1167GST2

  • v1.32 and earlieraffected

ELECOM CO.,LTD. WRC-2533GS2-B

  • v1.62 and earlieraffected

ELECOM CO.,LTD. WRC-2533GS2-W

  • v1.62 and earlieraffected

ELECOM CO.,LTD. WRC-2533GS2V-B

  • v1.62 and earlieraffected

ELECOM CO.,LTD. WRC-2533GST2

  • v1.30 and earlieraffected

ELECOM CO.,LTD. WRC-X3200GST3-B

  • v1.25 and earlieraffected

ELECOM CO.,LTD. WRC-G01-W

  • v1.24 and earlieraffected

ELECOM CO.,LTD. WMC-X1800GST-B

  • v1.41 and earlieraffected

ELECOM CO.,LTD. WSC-X1800GS-B

  • v1.41 and earlieraffected

References