ELECOM Wireless LAN Access Points Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in ELECOM wireless LAN access point devices. This issue allows an administrator to inject malicious scripts that are executed in the web browsers of other administrative users. The vulnerability affects several access point models, all running firmware versions through the specified version ranges.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the affected user.

Remediation

Users are advised to update the firmware to the latest version available. Specific update instructions can be found on the ELECOM website.