CVE-2024-40883: CSRF
First published: Thu Aug 01 2024(Updated: )
Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| <1.69 | ||
| All of | ||
| <1.69 | ||
| All of | ||
| <1.69 | ||
| All of | ||
| <1.12 | ||
| All of | ||
| <1.12 | ||
| All of | ||
| <1.12 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/event
- collector/nvd-api
- source/NVD
- vendor/elecom