high8.8
CVE-2024-23910
Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the…
Impact
Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit "WMC-2LX-B".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elecom | Wrc-1167gs2-B Firmware | before 1.73 |
| Elecom | Wrc-1167gs2h-B Firmware | before 1.73 |
| Elecom | Wrc-1167gst2 Firmware | before 1.34 |
| Elecom | Wrc-2533gs2-B Firmware | before 1.68 |
| Elecom | Wrc-2533gs2-W Firmware | before 1.68 |
| Elecom | Wrc-2533gs2v-B Firmware | before 1.68 |
| Elecom | Wrc-2533gst2 Firmware | before 1.31 |
| Elecom | Wrc-X3200gst3-B Firmware | before 1.27 |
| Elecom | Wrc-G01-W Firmware | before 1.26 |
| Elecom | Wmc-X1800gst-B Firmware | before 1.42 |
| Elecom | Wsc-X1800gs-B Firmware | before 1.42 |