CVE:CVE-2021-20860
CNNVD:CNNVD-202111-2337
elecom lan是日本Elecom的一款路由器。
ELECOM LAN 存在跨站请求伪造漏洞，该漏洞源于HTTP请求源验证不足。攻击者可利用该漏洞诱使受害者访问精心编制的网页，并代表受害者在易受攻击的网站上执行任意操作。
solution:Upgrade elecom wrc-1167gst2_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-1167gst2a_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-1167gst2h_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-2533gs2-b_firmware to a higher version than 1.52,and avoid the version (,1.52]; Upgrade elecom wrc-2533gs2-w_firmware to a higher version than 1.52,and avoid the version (,1.52]; Upgrade elecom wrc-1750gs_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-1750gsv_firmware to a higher version than 2.11,and avoid the version (,2.11]; Upgrade elecom wrc-1900gst_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-2533gst_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-2533gst2_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-2533gsta_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-2533gst2sp_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-2533gst2-g_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom edwrc-2533gst2_firmware to a higher version than 1.25,and avoid the version (,1.25]