CVE-2024-40883CWE-352

Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers

Medium · published August 1, 2024

CVSS v3.0
6.5
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-08-01T01:18Z
EPSS history
Timeline
  • 01 AUG 01:18Z
    Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers
    cvelistv5