This vulnerability involves a CSRF attack vector in ELECOM WRC-X1500GS-B routers (v1.11 and earlier). When an administrator is logged in, visiting a crafted malicious page can cause unauthorized changes to critical router settings like login credentials without the administrator's consent. The CVSS 3.0 vector indicates the attack requires network access with low attack complexity and user interaction but no privileges. The impact is high on integrity but no confidentiality or availability impact is noted. No vendor advisory or patch information is currently available.

Successful exploitation can lead to unauthorized modification of router administrative credentials, potentially allowing attackers to gain persistent control over the device. This compromises the integrity of the router's configuration but does not directly affect confidentiality or availability according to the CVSS vector. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should avoid visiting untrusted or suspicious web pages while logged into the router's administrative interface. Employing browser security features that block CSRF attacks or using separate devices for router management may reduce risk.