Description
ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to do unintended operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ELECOM | WAB-BE187-M | v1.1.10 and earlier | — |
| ELECOM | WAB-BE72-M | v1.1.3 and earlier | — |
| ELECOM | WAB-BE36-M | v1.1.3 and earlier | — |
| ELECOM | WAB-BE36-S | v1.1.3 and earlier | — |