CVE-2024-42412 MEDIUM

CVE-2024-42412

Vendor Elecom Co.,Ltd.
Product WAB-I1750-PS
Weakness CWE-79 · XSS
Published August 30, 2024
Last update September 19, 2025

CVSS base score

6.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.

Key dates

02Disclosure timeline

August 30, 2024 CVE published
September 19, 2025 Record updated