CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2024-40883
High (8.8) in elecom. EPSS 0.2% chance of exploitation in the next 30 days.
Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- elecom:wrc-2533gs2-b_firmware
- elecom:wrc-2533gs2-w_firmware
- elecom:wrc-2533gs2v-b_firmware
- elecom:wrc-x1500gs-b_firmware
- elecom:wrc-x1500gsa-b_firmware
- elecom:wrc-x6000xs-g_firmware