CVE-2024-34577 is a cross-site scripting vulnerability in ELECOM CO.,LTD. WRC-X3000GS2 series routers caused by improper processing of input values in the easysetup.cgi script. When a logged-in user visits a malicious web page, an attacker can execute arbitrary scripts within the user's browser session. The affected versions are firmware v1.08 and earlier. The vulnerability has a CVSS 3.1 base score of 4.6, indicating medium severity. No official fix or patch has been disclosed by the vendor, and no known exploitation has been observed.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of a logged-in user's browser, potentially leading to information disclosure or session manipulation. However, the attack requires the user to be logged into the device and to visit a malicious web page, limiting the scope of impact. There is no indication of direct impact on device availability or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid visiting untrusted web pages while logged into the affected devices. Monitoring vendor communications for updates is recommended.