cbcvebase.
CVE-2024-40883
published 2024-08-01

CVE-2024-40883: Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an…

PriorityP340high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.20%
9.7th percentile
Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.

Affected

21 ranges
VendorProductVersion rangeFixed in
elecomwrc-2533gs2-b_firmware< 1.691.69
elecomwrc-2533gs2-w_firmware< 1.691.69
elecomwrc-2533gs2v-b_firmware< 1.691.69
elecomwrc-x1500gs-b_firmware< 1.121.12
elecomwrc-x1500gsa-b_firmware< 1.121.12
elecomwrc-x6000xs-g_firmware< 1.121.12
elecom_co_ltdwrc-x1500gs-b——
elecom_co_ltdwrc-x1500gsa-b——
elecom_co_ltdwrc-x1800gs-b——
elecom_co_ltdwrc-x1800gsa-b——
elecom_co_ltdwrc-x1800gsh-b——
elecom_co_ltdwrc-x3000gs2-b——
elecom_co_ltdwrc-x3000gs2-w——
elecom_co_ltdwrc-x3000gs2a-b——
elecom_co_ltdwrc-x3000gst2-b——
elecom_co_ltdwrc-x6000qs-g——
elecom_co_ltdwrc-x6000qsa-g——
elecom_co_ltdwrc-x6000xs-g——
elecom_co_ltdwrc-x6000xst-g——
elecom_co_ltdwrc-xe5400gs-g——
elecom_co_ltdwrc-xe5400gsa-g——

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.