1. Home
  2. CVE Database
  3. CVE-2024-34577
MEDIUM · 6.1

CVE-2024-34577

Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi. If a user views a maliciou...

Vulnerability Description

Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
ElecomWrc-X3000Gs2-B Firmware<= 1.08
ElecomWrc-X3000Gs2-B-
ElecomWrc-X3000Gs2-W Firmware<= 1.08
ElecomWrc-X3000Gs2-W-
ElecomWrc-X3000Gs2A-B Firmware<= 1.08
ElecomWrc-X3000Gs2A-B-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2024-34577?

CVE-2024-34577 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi. If a user views a maliciou...

How severe is CVE-2024-34577?

CVE-2024-34577 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-34577?

Check the references section above for vendor advisories and patch information. Affected products include: Elecom Wrc-X3000Gs2-B Firmware, Elecom Wrc-X3000Gs2-B, Elecom Wrc-X3000Gs2-W Firmware, Elecom Wrc-X3000Gs2-W, Elecom Wrc-X3000Gs2A-B Firmware.