Tomonori Yamamoto

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.02.9 and prior Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For versions 1.02.9 and prior, update to a version later than 1.02.9 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.02.9 and prior Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For versions 1.02.9 and prior, update to a version later than 1.02.9 to resolve the issue.

The issue allows an administrative user to embed arbitrary scripts into the configuration data through a certain form field of the configuration page. These scripts may be executed on another administrative user's web browser.