Riskcovery

CVE-2024-42412

State
Published
Severity
6.1 Medium
Published
Aug 30, 2024
Updated
Sep 19, 2025
Reserved
Aug 16, 2024

Read the record on cve.org

Description

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.

Scores

CVSSScoreVectorSource
3.06.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:Njpcert

Weaknesses

  • CWE-79 Cross-site scripting (XSS)

Affected Products

ProductVersions
WAB-I1750-PSELECOM CO.,LTD.
  • v1.5.10 and earlierAffected
WAB-M1775-PSELECOM CO.,LTD.
  • v2.1.4 and earlierAffected
WAB-S1167-PSELECOM CO.,LTD.
  • v1.5.6 and earlierAffected
WAB-S1775ELECOM CO.,LTD.
  • v2.1.4 and earlierAffected
WAB-S733MIELECOM CO.,LTD.
  • v1.3.2 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.