CVE-2024-21798

2024-02-2823:03:39

jpcert

github.com

elecom

wireless lan routers

cross-site scripting

vulnerability

administrative user

web browser

wmc-x1800gst-b

e-mesh starter kit

wmc-2lx-b

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit “WMC-2LX-B”.