ELECOM Wireless LAN Access Points Inadequate CSRF Protection Vulnerability

A vulnerability exists in various ELECOM wireless LAN access point models due to inadequate handling of Cross-Site Request Forgery (CSRF) tokens. While these devices implement a CSRF protection mechanism, the implementation is flawed, allowing logged-in users to be tricked into performing unintended actions. This vulnerability affects multiple access point models through specific firmware versions.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed by a logged-in user on the affected device.

Remediation

Users are advised to update the firmware to the latest version available for their specific ELECOM wireless LAN access point model.