1. Home
  2. CVE Database
  3. CVE-2024-23910
HIGH · 8.8

CVE-2024-23910

Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to ...

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit "WMC-2LX-B".

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ElecomWrc-1167Gs2-B Firmware< 1.73
ElecomWrc-1167Gs2-B-
ElecomWrc-1167Gs2H-B Firmware< 1.73
ElecomWrc-1167Gs2H-B-
ElecomWrc-1167Gst2 Firmware< 1.34
ElecomWrc-1167Gst2-
ElecomWrc-2533Gs2-B Firmware< 1.68
ElecomWrc-2533Gs2-B-
ElecomWrc-2533Gs2-W Firmware< 1.68
ElecomWrc-2533Gs2-W-
ElecomWrc-2533Gs2V-B Firmware< 1.68
ElecomWrc-2533Gs2V-B-
ElecomWrc-2533Gst2 Firmware< 1.31
ElecomWrc-2533Gst2-
ElecomWrc-X3200Gst3-B Firmware< 1.27
ElecomWrc-X3200Gst3-B-
ElecomWrc-G01-W Firmware< 1.26
ElecomWrc-G01-W-
ElecomWmc-X1800Gst-B Firmware< 1.42
ElecomWmc-X1800Gst-B-

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2024-23910?

CVE-2024-23910 is a vulnerability with a CVSS score of 8.8 (HIGH). Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to ...

How severe is CVE-2024-23910?

CVE-2024-23910 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-23910?

Check the references section above for vendor advisories and patch information. Affected products include: Elecom Wrc-1167Gs2-B Firmware, Elecom Wrc-1167Gs2-B, Elecom Wrc-1167Gs2H-B Firmware, Elecom Wrc-1167Gs2H-B, Elecom Wrc-1167Gst2 Firmware.