What’s Vulnerable › Vulnerabilities

CVE-2024-34577

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-30 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.

Affected products

• Elecom Wrc-X3000Gs2-B Firmware: through 1.08
• Elecom Wrc-X3000Gs2-W Firmware: through 1.08
• Elecom Wrc-X3000Gs2A-B Firmware: through 1.08

References

• https://jvn.jp/en/jp/JVN24885537/
• https://www.elecom.co.jp/news/security/20240827-01/

Get alerted when CVE-2024-34577 or the next vulnerability affects your stack