1. Home
  2. CVE Database
  3. CVE-2024-21798
MEDIUM · 4.8

CVE-2024-21798

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another admin...

Vulnerability Description

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
ElecomWrc-1167Gs2-B Firmware< 1.73
ElecomWrc-1167Gs2-B-
ElecomWrc-1167Gs2H-B Firmware< 1.73
ElecomWrc-1167Gs2H-B-
ElecomWrc-1167Gst2 Firmware< 1.34
ElecomWrc-1167Gst2-
ElecomWrc-2533Gs2-B Firmware< 1.68
ElecomWrc-2533Gs2-B-
ElecomWrc-2533Gs2-W Firmware< 1.68
ElecomWrc-2533Gs2-W-
ElecomWrc-2533Gs2V-B Firmware< 1.68
ElecomWrc-2533Gs2V-B-
ElecomWrc-2533Gst2 Firmware< 1.31
ElecomWrc-2533Gst2-
ElecomWrc-X3200Gst3-B Firmware< 1.27
ElecomWrc-X3200Gst3-B-
ElecomWrc-G01-W Firmware< 1.26
ElecomWrc-G01-W-
ElecomWmc-X1800Gst-B Firmware< 1.42
ElecomWmc-X1800Gst-B-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2024-21798?

CVE-2024-21798 is a vulnerability with a CVSS score of 4.8 (MEDIUM). ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another admin...

How severe is CVE-2024-21798?

CVE-2024-21798 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-21798?

Check the references section above for vendor advisories and patch information. Affected products include: Elecom Wrc-1167Gs2-B Firmware, Elecom Wrc-1167Gs2-B, Elecom Wrc-1167Gs2H-B Firmware, Elecom Wrc-1167Gs2H-B, Elecom Wrc-1167Gst2 Firmware.