CVE-2021-20677

🗓️ 26 Mar 2021 08:50:26Reported by jpcertType

UNIVERGE Aspire series PBX allows remote attackers to cause denial of service (DoS)

Reporter	Title	Published	Views	Family All 8
CNNVD	NEC UNIVERGE Aspire UX 安全漏洞	22 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-20677	26 Mar 202108:50	–	cvelist
EUVD	EUVD-2021-8095	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#12737530: UNIVERGE Aspire series PBX vulnerable to denial-of-service (DoS)	22 Mar 202100:00	–	jvn
Japan Vulnerability Notes	UNIVERGE Aspire series PBX vulnerable to denial-of-service (DoS)	22 Mar 202105:57	–	jvn
NVD	CVE-2021-20677	26 Mar 202109:15	–	nvd
Prion	Command injection	26 Mar 202109:15	–	prion
RedhatCVE	CVE-2021-20677	22 May 202519:08	–	redhatcve

NVD

Vulners

Node

necplatforms univerge_aspire_wx_firmwareRange1.00–3.51

AND

necplatforms univerge_aspire_wxMatch-

Node

necplatforms univerge_aspire_ux_firmwareRange1.00–9.70

AND

necplatforms univerge_aspire_uxMatch-

Node

necplatforms univerge_sv9100_firmwareRange1.00–10.70

AND

necplatforms univerge_sv9100Match-

Node

necplatforms sl2100_firmwareRange1.00–3.00

AND

necplatforms sl2100Match-

[
  {
    "product": "UNIVERGE Aspire series PBX",
    "vendor": "NEC Platforms, Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00"
      }
    ]
  }
]

Source	Link
necplatforms	www.necplatforms.co.jp/en/press/security_adv.html
jvn	www.jvn.jp/en/jp/JVN12737530/index.html

21 Nov 2024 05:46Current

4Medium risk

Vulners AI Score4

CVSS 3.13.1

CVSS 23.5

EPSS0.00296