Lucene search
HistoryFeb 28, 2024 - 11:15 p.m.
CVE-2024-23910
cve-2024-23910
csrf
elecom
wireless lan
routers
vulnerability
nvd
Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit “WMC-2LX-B”.
Affected configurations
Node
elecomwrc-1167gs2-bMatch1.67
elecomwrc-1167gs2h-bMatch1.67
elecomwrc-2533gs2-bMatch1.62
elecomwrc-2533gs2-wMatch1.62
elecomwrc-1167fs-bMatch1.62
elecomwrc-1167fs-bMatch1.25
elecomwrc-1167fs-wMatch1.24
elecomwmc-dlgst2-wMatch1.41
elecomwrc-x1800gs-bMatch1.41
| Vendor | Product | Version | CPE |
|---|---|---|---|
| elecom | wrc\-1167gs2\-b | 1.67 | cpe:2.3:h:elecom:wrc\-1167gs2\-b:1.67:*:*:*:*:*:*:* |
| elecom | wrc\-1167gs2h\-b | 1.67 | cpe:2.3:h:elecom:wrc\-1167gs2h\-b:1.67:*:*:*:*:*:*:* |
| elecom | wrc\-2533gs2\-b | 1.62 | cpe:2.3:h:elecom:wrc\-2533gs2\-b:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-2533gs2\-w | 1.62 | cpe:2.3:h:elecom:wrc\-2533gs2\-w:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-b | 1.62 | cpe:2.3:h:elecom:wrc\-1167fs\-b:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-b | 1.25 | cpe:2.3:h:elecom:wrc\-1167fs\-b:1.25:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-w | 1.24 | cpe:2.3:h:elecom:wrc\-1167fs\-w:1.24:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2H-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-W",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2V-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-X3200GST3-B",
"versions": [
{
"version": "v1.25 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-G01-W",
"versions": [
{
"version": "v1.24 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WMC-X1800GST-B",
"versions": [
{
"version": "v1.41 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WSC-X1800GS-B",
"versions": [
{
"version": "v1.41 and earlier",
"status": "affected"
}
]
}
]Related
prion
prion
Cross site request forgery (csrf)
2024-02-28 23:15:00
nvd
nvd
CVE-2024-23910
2024-02-28 23:15:09
cvelist
cvelist
CVE-2024-23910
2024-02-28 23:07:02
jvn
jvn