The vulnerability in ELECOM WAB-BE187-M devices arises from improper validation of the language parameter. This flaw allows a maliciously crafted page, when viewed by a logged-in user, to disrupt the admin page's display or functionality in the user's web browser. The issue affects firmware versions v1.1.10 and earlier. The CVSS 3.0 vector indicates the attack requires network access, low attack complexity, no privileges, and user interaction, with impact limited to availability (admin page disruption). No official fix or mitigation has been documented by the vendor as of the published date.

The vulnerability can cause the admin page on the user's web browser to become broken or unusable, impacting availability of the management interface. There is no impact on confidentiality or integrity. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid viewing untrusted or malicious web pages while logged into the device's admin interface to prevent disruption. Monitor vendor communications for updates on patches or mitigations.