The ELECOM WAB-BE187-M wireless LAN access point devices implement a CSRF protection mechanism that is insufficient because of improper handling of CSRF tokens. This vulnerability allows an attacker to potentially trick authenticated users into executing unintended actions by visiting a malicious webpage. The issue affects firmware versions up to v1.1.10. The CVSS 3.0 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, and user interaction needed, resulting in limited integrity impact without confidentiality or availability impact. No vendor advisory or patch information is currently available.

An attacker could exploit this vulnerability to cause an authenticated user to perform unintended operations on the affected device by leveraging the flawed CSRF protection. The impact is limited to integrity, with no direct confidentiality or availability consequences reported. Since user interaction is required, the risk is moderated. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when accessing untrusted web content while logged into the device's management interface. No official mitigation or workaround has been provided by ELECOM CO.,LTD. at this time.