Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-40883

Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege,

Description

Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WRC-X1500GS-B

  • v1.11 and earlieraffected

ELECOM CO.,LTD. WRC-X1500GSA-B

  • v1.11 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GS-B

  • v1.18 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GSA-B

  • v1.18 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GSH-B

  • v1.18 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2-B

  • v1.08 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2-W

  • v1.08 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2A-B

  • v1.08 and earlieraffected

ELECOM CO.,LTD. WRC-XE5400GS-G

  • v1.12 and earlieraffected

ELECOM CO.,LTD. WRC-XE5400GSA-G

  • v1.12 and earlieraffected

ELECOM CO.,LTD. WRC-X6000QS-G

  • v1.13 and earlieraffected

ELECOM CO.,LTD. WRC-X6000QSA-G

  • v1.13 and earlieraffected

ELECOM CO.,LTD. WRC-X6000XS-G

  • v1.11 and earlieraffected

ELECOM CO.,LTD. WRC-X6000XST-G

  • v1.14 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GST2-B

  • v1.06 and earlieraffected

References