VULNERABILITY INTELLIGENCE

CVE-2024-40883

CVSS score8.8 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2024-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.

Weakness classification

  • vultures@jpcert.or.jp: CWE-352
  • nvd@nist.gov: CWE-352

Primary references