Lucene search
JpcertCVELIST:CVE-2024-23910HistoryFeb 28, 2024 - 11:07 p.m.
CVE-2024-23910
2024-02-2823:07:02
jpcert
www.cve.org
1
cve-2024-23910
cross-site request forgery
elecom routers
authentication hijacking
unintended operations
wrc-1167gs2-b
wrc-1167gs2h-b
wrc-2533gs2-b
wrc-2533gs2-w
wrc-2533gs2v-b
wrc-x3200gst3-b
wrc-g01-w
Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit “WMC-2LX-B”.
CNA Affected
[
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2H-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-W",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2V-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-X3200GST3-B",
"versions": [
{
"version": "v1.25 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-G01-W",
"versions": [
{
"version": "v1.24 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WMC-X1800GST-B",
"versions": [
{
"version": "v1.41 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WSC-X1800GS-B",
"versions": [
{
"version": "v1.41 and earlier",
"status": "affected"
}
]
}
]Related
prion
prion
Cross site request forgery (csrf)
2024-02-28 23:15:00
nvd
nvd
CVE-2024-23910
2024-02-28 23:15:09
cve
cve
CVE-2024-23910
2024-02-28 23:15:09
jvn
jvn