What is CVE-2024-40883?

CVE-2024-40883 is a high-severity vulnerability in Elecom Wrc-2533gs2-B, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2024-08-01.

How severe is CVE-2024-40883?

High severity. CVSS v3 base score is 8.8 out of 10.

Is CVE-2024-40883 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Elecom Wrc-2533gs2-B

CVE-2024-40883

Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.002 (11.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

References

vultures@jpcert.or.jp (Vendor Advisory)
vultures@jpcert.or.jp (Third Party Advisory)

Frequently asked questions

What is CVE-2024-40883?: CVE-2024-40883 is a high-severity vulnerability in Elecom Wrc-2533gs2-B, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2024-08-01.
How severe is CVE-2024-40883?: High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2024-40883 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.