← Database

CVE-2024-42412

MEDIUM CVSS: 6.1 Published: 2024-08-30 Modified: 2026-06-17

Description

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.

Affected Platforms

Elecom Wab-S1167-Ps FirmwareElecom Wab-S1167-PsElecom Wab-I1750-PsElecom Wab-I1750-Ps Firmware

Weakness Type

CWE-79, CWE-79

References