Attackers Can Access Sensitive Information Through Specially Crafted Requests
CVE-2024-29225

4.3MEDIUM

Key Information:

Vendor: Elecom Co.,ltd.
Status: Wrc-x3200gst3-b; Wrc-g01-w; Wmc-2lx-b; Wmc-x1800gst-b
Vendor: CVE Published:; 4 April 2024

🔔 Create Elecom Co.,ltd. Vulnerability Alert

What is CVE-2024-29225?

ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request.

Affected Version(s)

WMC-2LX-B v1.42 and earlier

WMC-X1800GST-B v1.42 and earlier

WRC-G01-W v1.24 and earlier

References

https://www.elecom.co.jp/news/security/20240326-01/

https://jvn.jp/en/vu/JVNVU95381465/

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 4, 2024

CVE-2024-29225 Data

JSON