Lucene search
JpcertCVELIST:CVE-2024-21798HistoryFeb 28, 2024 - 11:03 p.m.
CVE-2024-21798
2024-02-2823:03:39
jpcert
www.cve.org
4
elecom
wireless lan
routers
cross-site scripting
vulnerability
administrative user
web browser
wrc-1167gs2-b
wrc-1167gs2h-b
wrc-2533gs2-b
wrc-2533gs2-w
wrc-2533gs2v-b
wrc-x3200gst3-b
wrc-g01-w
ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit “WMC-2LX-B”.
CNA Affected
[
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2H-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-W",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2V-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GST2",
"versions": [
{
"version": "v1.30 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-X3200GST3-B",
"versions": [
{
"version": "v1.25 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-G01-W",
"versions": [
{
"version": "v1.24 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WMC-X1800GST-B",
"versions": [
{
"version": "v1.41 and earlier",
"status": "affected"
}
]
}
]Related
prion
prion
Cross site scripting
2024-02-28 23:15:00
vulnrichment
vulnrichment
CVE-2024-21798
2024-02-28 23:03:39
nvd
nvd
CVE-2024-21798
2024-02-28 23:15:09
cve
cve
CVE-2024-21798
2024-02-28 23:15:09
jvn
jvn