CVSS: 6.4EPSS: 0%CPEs: 3EXPL: 0CVE-2024-34577
https://notcve.org/view.php?id=CVE-2024-34577
30 Aug 2024 — Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, and WRC-X3000GS2A-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser. • https://jvn.jp/en/jp/JVN24885537 •
CVSS: 8.0EPSS: 0%CPEs: 6EXPL: 0CVE-2023-43752
https://notcve.org/view.php?id=CVE-2023-43752
16 Nov 2023 — OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request. Vulnerabilidad de inyección de comandos del sistema operativo en WRC-X3000GS2-W v1.05 y anteriores, WRC-X3000GS2-B v1.05 y anteriores, y WRC-X3000GS2A-B v1.05 y anteriores permite que un usuario autenticado adyacente a la red ejecute un sistema ope... • https://jvn.jp/en/vu/JVNVU94119876 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •