CVE-2021-20680

🗓️ 26 Apr 2021 00:20:39Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 55 Views

Cross-site scripting vulnerability in NEC Aterm devices allows remote attackers to inject arbitrary script or HTML via unspecified vectors

Reporter	Title	Published	Views	Family All 9
CNNVD	NEC Aterm 跨站脚本漏洞	9 Apr 202100:00	–	cnnvd
Cvelist	CVE-2021-20680	26 Apr 202100:20	–	cvelist
EUVD	EUVD-2021-8098	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#67456944: Multiple vulnerabilities in multiple Aterm products	9 Apr 202100:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in multiple Aterm products	9 Apr 202108:16	–	jvn
NVD	CVE-2021-20680	26 Apr 202101:15	–	nvd
OSV	CVE-2021-20680	26 Apr 202101:15	–	osv
Prion	Cross site scripting	26 Apr 202101:15	–	prion
RedhatCVE	CVE-2021-20680	22 May 202520:59	–	redhatcve

NVD

Vulners

Node

nec aterm_wg1900hp2_firmwareRange≤1.3.1

AND

nec aterm_wg1900hp2Match-

Node

nec aterm_wg1900hp_firmwareRange≤2.5.1

AND

nec aterm_wg1900hpMatch-

Node

nec aterm_wg1800hp4_firmwareRange≤1.3.1

AND

nec aterm_wg1800hp4Match-

Node

nec aterm_wg1800hp3_firmwareRange≤1.5.1

AND

nec aterm_wg1800hp3Match-

Node

nec aterm_wg1200hs3_firmwareRange≤1.1.2

AND

nec aterm_wg1200hs3Match-

Node

nec aterm_wg1200hs2_firmwareRange≤2.5.0

AND

nec aterm_wg1200hs2Match-

Node

nec aterm_wg1200hp3_firmwareRange≤1.3.1

AND

nec aterm_wg1200hp3Match-

Node

nec aterm_wg1200hp2_firmwareRange≤2.5.0

AND

nec aterm_wg1200hp2Match-

Node

nec aterm_w1200ex_firmwareRange≤1.3.1

AND

nec aterm_w1200exMatch-

Node

nec aterm_w1200ex-ms_firmwareRange≤1.3.1

AND

nec aterm_w1200ex-msMatch-

Node

nec aterm_wg1200hs_firmware

AND

nec aterm_wg1200hsMatch-

Node

nec aterm_wg1200hp_firmware

AND

nec aterm_wg1200hpMatch-

Node

nec aterm_wf800hp_firmware

AND

nec aterm_wf800hpMatch-

Node

nec aterm_wf300hp2_firmware

AND

nec aterm_wf300hp2Match-

Node

nec aterm_wr8165n_firmware

AND

nec aterm_wr8165nMatch-

Node

nec aterm_w500p_firmware

AND

nec aterm_w500pMatch-

Node

nec aterm_w300p_firmware

AND

nec aterm_w300pMatch-

[
  {
    "product": "NEC Aterm devices",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier, Aterm WG1200HP3 firmware Ver.1.3.1 and earlier, Aterm WG1200HP2 firmware Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, Aterm WG1200HS firmware all versions Aterm WG1200HP firmware all versions Aterm WF800HP firmware all versions Aterm WF300HP2 firmware all versions Aterm WR8165N firmware all versions Aterm W500P firmware all versions, and  Aterm W300P firmware all versions"
      }
    ]
  }
]

Source	Link
jpn	www.jpn.nec.com/security-info/secinfo/nv21-008.html
jvn	www.jvn.jp/en/jp/JVN67456944/index.html

21 Nov 2024 05:46Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 3.16.1

EPSS0.00347

CWE-79