CVE-2024-40883

2024-08-0101:18:01

jpcert

github.com

cve-2024-40883

elecom routers

cross-site request forgery

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

24.8%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.