Vulnerability Details CVE-2024-42412
Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.6%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2024-42412
-
cpe:2.3:h:elecom:wab-i1750-ps:-
-
cpe:2.3:h:elecom:wab-s1167-ps:-
-
cpe:2.3:o:elecom:wab-i1750-ps_firmware:-
-
cpe:2.3:o:elecom:wab-i1750-ps_firmware:1.5.10
-
cpe:2.3:o:elecom:wab-s1167-ps_firmware:-
-
cpe:2.3:o:elecom:wab-s1167-ps_firmware:1.5.6