Unscored CVE-2023-37560 EUVD-2023-41446GHSA-wj8c-qf95-jjgj

Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attac…

Published Jul 13, 2023 · Updated Nov 5, 2024 · Assigned by jpcert

Vendor: ELECOM Product: WRH-300WH-H Product: WTC-300HWH

Description

Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

Vendor	Product	Affected	Fixed
ELECOM	WRH-300WH-H	v2.12 and earlier	—
ELECOM	WTC-300HWH	v1.09 and earlier	—

References

https://www.elecom.co.jp/news/security/20230711-01/
https://jvn.jp/en/jp/JVN05223215/