PT-2024-25648 · Elecom · Elecom Wireless Lan Routers

Daichi Arai + 1 · Published 2024-08-01 · Updated 2024-11-26 · CVE-2024-34021

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ELECOM wireless LAN routers (affected versions not specified)

Description The issue allows for the unrestricted upload of files with dangerous types in ELECOM wireless LAN routers. A specially crafted file can be uploaded by a logged-in user with administrative privileges, resulting in the execution of arbitrary OS commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-34021

Affected Products

Elecom Wireless Lan Routers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-34021 · Security Note
• https://jvn.jp/en/jp/JVN06672778 · Note
• https://t.me/cvedetector/2201 · Telegram Post
• https://elecom.co.jp/news/security/20240730-01 · Note
• https://t.me/cvenotify/88143 · Telegram Post