ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-21798

—
CVSS 3.1
4.8 medium
EPSS
1%p68
Published
()
Modified
Description

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".

Vendors
elecom
Products
wrc-1167gs2-b firmware, wrc-1167gs2h-b firmware, wrc-1167gst2 firmware, wrc-2533gs2-b firmware, wrc-2533gs2-w firmware, wrc-2533gs2v-b firmware, wrc-2533gst2 firmware, wrc-x3200gst3-b firmware, wrc-g01-w firmware, wmc-x1800gst-b firmware
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.