ELECOM Wireless LAN Products Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in ELECOM wireless LAN routers WRC-X1500GS-B and WRC-X1500GSA-B, both version 1.12 and earlier. This vulnerability allows unintended actions to be performed on behalf of a user who is logged into the affected device and accesses a malicious webpage.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on the affected device, potentially allowing attackers to manipulate settings or configurations without the user's consent.

Remediation

Users are advised to update the firmware of the affected models to version 1.13 or later. After updating, it is recommended to change the passwords for the admin page and Wi-Fi connection to strong, hard-to-guess alternatives.