Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:30 a.m.10 views

CVE-2024-39300

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without authentication and alter the product's settings...

8.1CVSS7.2AI score0.00481EPSS
Exploits0
NVD
NVD
added 2024/10/21 2:15 a.m.26 views

CVE-2024-43689

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed...

9.8CVSS0.00943EPSS
Exploits0References2
CVE
CVE
added 2024/10/21 1:27 a.m.52 views

CVE-2024-43689

CVE-2024-43689 describes a stack-based buffer overflow in ELECOM wireless access points/routers triggered by processing a crafted HTTP request, potentially enabling arbitrary code execution. Affected products and versions (per connected sources): WRC-X3000GS2-B/W/GS2A-B before 1.09; WAB-I1750-PS ...

9.8CVSS9.3AI score0.00943EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/10/21 1:27 a.m.28 views

CVE-2024-43689

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed...

8.8CVSS0.00943EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/10/21 1:27 a.m.16 views

CVE-2024-43689

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed...

8.8CVSS9.5AI score0.00943EPSS
Exploits0References2
NVD
NVD
added 2024/08/30 7:15 a.m.30 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS0.00245EPSS
Exploits0References2
OSV
OSV
added 2024/08/30 7:15 a.m.2 views

CVE-2024-39300

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without authentication and alter the product's settings...

3.7CVSS5.8AI score0.00481EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/30 6:29 a.m.26 views

CVE-2024-39300

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without authentication and alter the product's settings...

0.00481EPSS
Exploits0References2
CVE
CVE
added 2024/08/30 6:29 a.m.57 views

CVE-2024-39300

CVE-2024-39300 corresponds to a missing authentication vulnerability in the Telnet function of ELECOM WAB-I1750-PS (v1.5.10 and earlier). When Telnet is enabled, a remote attacker can log in without authentication and alter settings, potentially fully compromising the device. Public sources confi...

8.1CVSS7.2AI score0.00481EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/30 6:29 a.m.22 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS6.5AI score0.00245EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/30 6:29 a.m.34 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS0.00245EPSS
Exploits0References2
CVE
CVE
added 2024/08/30 6:29 a.m.53 views

CVE-2024-42412

CVE-2024-42412 is a cross-site scripting vulnerability in ELECOM wireless access points caused by improper processing of input values in the menu.cgi script. The issue can allow an arbitrary script to run in a user’s browser when visiting a malicious page while authenticated to the device. Affect...

6.1CVSS6.5AI score0.00245EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.7 views

PT-2024-28426 · Unknown · Wab-I1750-Ps

Name of the Vulnerable Software and Affected Versions: WAB-I1750-PS versions 1.5.10 and earlier Description: A missing authentication vulnerability exists in the Telnet function of the product. When the Telnet function is enabled, a remote attacker may login to the product without authentication...

8.1CVSS7.5AI score0.00481EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.5 views

PT-2024-29933 · Elecom · Elecom Wireless Access Points

Name of the Vulnerable Software and Affected Versions: ELECOM wireless access points affected versions not specified WAB-I1750-PS affected versions not specified WAB-S1167-PS affected versions not specified Description: A cross-site scripting vulnerability exists due to improper processing of inp...

6.1CVSS6.4AI score0.00245EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/08/27 12:0 a.m.5 views

ELECOM多款产品 跨站脚本漏洞

ELECOM WRC-X3000GS2-W and others are products of ELECOM Corporation.ELECOM WRC-X3000GS2-W is a wireless router.ELECOM WRC-X3000GS2-B is a gigabit router.ELECOM WRC-X3000GS2A-B is a gigabit router. A cross-site scripting vulnerability exists in various ELECOM products, which originates from the...

6.1CVSS6.4AI score0.00245EPSS
Exploits0References5
Rows per page
Query Builder