CVE-2024-23910

2024-02-2823:15:09

[email protected]

web.nvd.nist.gov

cve-2024-23910

cross-site request forgery

remote attacker

authentication hijacking

unintended operations

wrc-1167gs2-b

wrc-1167gs2h-b

wrc-2533gs2-b

wrc-2533gs2-w

wrc-2533gs2v-b

wrc-x3200gst3-b

wrc-g01-w

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit “WMC-2LX-B”.

References

jvn.jp/en/jp/JVN44166658/

www.elecom.co.jp/news/security/20240220-01/