Lucene search
HistoryFeb 28, 2024 - 11:15 p.m.
CVE-2024-21798
cve-2024-21798
elecom
wireless lan
routers
cross-site scripting
vulnerability
wrc-1167gs2-b
wrc-1167gs2h-b
wrc-2533gs2-b
wrc-2533gs2-w
wrc-2533gs2v-b
nvd
ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit “WMC-2LX-B”.
Affected configurations
Node
elecomwrc-1167gs2-bMatch1.67
elecomwrc-1167gs2h-bMatch1.67
elecomwrc-2533gs2-bMatch1.62
elecomwrc-2533gs2-wMatch1.62
elecomwrc-1167fs-bMatch1.62
elecomwrc-1167fs-bMatch1.25
elecomwrc-1167fs-wMatch1.24
elecomwmc-dlgst2-wMatch1.41
| Vendor | Product | Version | CPE |
|---|---|---|---|
| elecom | wrc\-1167gs2\-b | 1.67 | cpe:2.3:h:elecom:wrc\-1167gs2\-b:1.67:*:*:*:*:*:*:* |
| elecom | wrc\-1167gs2h\-b | 1.67 | cpe:2.3:h:elecom:wrc\-1167gs2h\-b:1.67:*:*:*:*:*:*:* |
| elecom | wrc\-2533gs2\-b | 1.62 | cpe:2.3:h:elecom:wrc\-2533gs2\-b:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-2533gs2\-w | 1.62 | cpe:2.3:h:elecom:wrc\-2533gs2\-w:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-b | 1.62 | cpe:2.3:h:elecom:wrc\-1167fs\-b:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-b | 1.25 | cpe:2.3:h:elecom:wrc\-1167fs\-b:1.25:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-w | 1.24 | cpe:2.3:h:elecom:wrc\-1167fs\-w:1.24:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2H-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-W",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2V-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-X3200GST3-B",
"versions": [
{
"version": "v1.25 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-G01-W",
"versions": [
{
"version": "v1.24 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WMC-X1800GST-B",
"versions": [
{
"version": "v1.41 and earlier",
"status": "affected"
}
]
}
]Related
prion
prion
Cross site scripting
2024-02-28 23:15:00
cvelist
cvelist
CVE-2024-21798
2024-02-28 23:03:39
nvd
nvd
CVE-2024-21798
2024-02-28 23:15:09
jvn
jvn