Lucene search
+L

13 matches found

NVD
NVD
added 2024/10/21 2:15 a.m.28 views

CVE-2024-43689

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed...

9.8CVSS0.00943EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/10/21 1:27 a.m.16 views

CVE-2024-43689

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed...

8.8CVSS9.5AI score0.00943EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/10/21 1:27 a.m.31 views

CVE-2024-43689

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed...

8.8CVSS0.00943EPSS
Exploits0References2
CVE
CVE
added 2024/10/21 1:27 a.m.53 views

CVE-2024-43689

CVE-2024-43689 describes a stack-based buffer overflow in ELECOM wireless access points/routers triggered by processing a crafted HTTP request, potentially enabling arbitrary code execution. Affected products and versions (per connected sources): WRC-X3000GS2-B/W/GS2A-B before 1.09; WAB-I1750-PS ...

9.8CVSS9.3AI score0.00943EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/08/30 7:15 a.m.32 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS0.00245EPSS
Exploits0References2
CVE
CVE
added 2024/08/30 6:29 a.m.54 views

CVE-2024-42412

CVE-2024-42412 is a cross-site scripting vulnerability in ELECOM wireless access points caused by improper processing of input values in the menu.cgi script. The issue can allow an arbitrary script to run in a user’s browser when visiting a malicious page while authenticated to the device. Affect...

6.1CVSS6.5AI score0.00245EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/30 6:29 a.m.23 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS6.5AI score0.00245EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/30 6:29 a.m.40 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS0.00245EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.7 views

PT-2024-29933 · Elecom · Elecom Wireless Access Points

Name of the Vulnerable Software and Affected Versions: ELECOM wireless access points affected versions not specified WAB-I1750-PS affected versions not specified WAB-S1167-PS affected versions not specified Description: A cross-site scripting vulnerability exists due to improper processing of inp...

6.1CVSS6.4AI score0.00245EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/08/27 12:0 a.m.6 views

ELECOM多款产品 跨站脚本漏洞

ELECOM WRC-X3000GS2-W and others are products of ELECOM Corporation.ELECOM WRC-X3000GS2-W is a wireless router.ELECOM WRC-X3000GS2-B is a gigabit router.ELECOM WRC-X3000GS2A-B is a gigabit router. A cross-site scripting vulnerability exists in various ELECOM products, which originates from the...

6.1CVSS6.4AI score0.00245EPSS
Exploits0References5
NVD
NVD
added 2023/08/18 10:15 a.m.27 views

CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request...

8.8CVSS8.8AI score0.01566EPSS
Exploits0References3
Prion
Prion
added 2023/08/18 10:15 a.m.22 views

Command injection

OS command injection vulnerability in ELECOM network devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WAB-S600-PS all versions, WAB-S300 all versions, WAB-M1775-PS v1.1.21 and earlier,...

6.5CVSS8.8AI score0.01566EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/08/18 9:45 a.m.27 views

CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request...

9AI score0.01566EPSS
Exploits0References3
Rows per page
Query Builder