Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-20680

Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier, Aterm WG1200HP3 firmware Ver.1.3.1 and earlier, Aterm WG1200HP2 firmware Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, Aterm WG1200HS firmware all versions Aterm WG1200HP firmware all versions Aterm WF800HP firmware all versions Aterm WF300HP2 firmware all versions Aterm WR8165N firmware all versions Aterm W500P firmware all versions, and Aterm W300P firmware all versions) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.

Published

2021-04-26T01:15:07.770

Last Modified

2024-11-21T05:46:59.873

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nec aterm_wg1900hp2_firmware ≤ 1.3.1 Yes
Hardware nec aterm_wg1900hp2 - No
Operating System nec aterm_wg1900hp_firmware ≤ 2.5.1 Yes
Hardware nec aterm_wg1900hp - No
Operating System nec aterm_wg1800hp4_firmware ≤ 1.3.1 Yes
Hardware nec aterm_wg1800hp4 - No
Operating System nec aterm_wg1800hp3_firmware ≤ 1.5.1 Yes
Hardware nec aterm_wg1800hp3 - No
Operating System nec aterm_wg1200hs3_firmware ≤ 1.1.2 Yes
Hardware nec aterm_wg1200hs3 - No
Operating System nec aterm_wg1200hs2_firmware ≤ 2.5.0 Yes
Hardware nec aterm_wg1200hs2 - No
Operating System nec aterm_wg1200hp3_firmware ≤ 1.3.1 Yes
Hardware nec aterm_wg1200hp3 - No
Operating System nec aterm_wg1200hp2_firmware ≤ 2.5.0 Yes
Hardware nec aterm_wg1200hp2 - No
Operating System nec aterm_w1200ex_firmware ≤ 1.3.1 Yes
Hardware nec aterm_w1200ex - No
Operating System nec aterm_w1200ex-ms_firmware ≤ 1.3.1 Yes
Hardware nec aterm_w1200ex-ms - No
Operating System nec aterm_wg1200hs_firmware * Yes
Hardware nec aterm_wg1200hs - No
Operating System nec aterm_wg1200hp_firmware * Yes
Hardware nec aterm_wg1200hp - No
Operating System nec aterm_wf800hp_firmware * Yes
Hardware nec aterm_wf800hp - No
Operating System nec aterm_wf300hp2_firmware * Yes
Hardware nec aterm_wf300hp2 - No
Operating System nec aterm_wr8165n_firmware * Yes
Hardware nec aterm_wr8165n - No
Operating System nec aterm_w500p_firmware * Yes
Hardware nec aterm_w500p - No
Operating System nec aterm_w300p_firmware * Yes
Hardware nec aterm_w300p - No
References