Unintended Operations Threaten ELECOM Routers via Cross-Site Request Forgery

CVE-2024-40883

Summary

A cross-site request forgery vulnerability has been identified in ELECOM wireless LAN routers that can potentially allow attackers to exploit user sessions. When an administrator logs into the router while visiting a malicious webpage, they could inadvertently perform actions such as changing their login credentials without their consent. This vulnerability poses significant risks, especially in environments where secure network management is critical. Users of the affected routers should take immediate action to secure their devices.

References