Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-42412 EUVD-2024-39871GHSA-hff3-p4h7-f98r

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a use…

Published Aug 30, 2024 · Updated Sep 19, 2025 · Assigned by jpcert

Vendor: ELECOM Product: WAB-I1750-PS Product: WAB-M1775-PS Product: WAB-S1167-PS Product: WAB-S1775 Product: WAB-S733MI

Description

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser.

Affected products

VendorProductAffectedFixed
ELECOM WAB-I1750-PS v1.5.10 and earlier —
ELECOM WAB-M1775-PS v2.1.4 and earlier —
ELECOM WAB-S1167-PS v1.5.6 and earlier —
ELECOM WAB-S1775 v2.1.4 and earlier —
ELECOM WAB-S733MI v1.3.2 and earlier —

References