CVE-2021-20739

🗓️ 07 Jul 2021 07:05:26Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 44 Views

CVE-2021-20739 allows unauthenticated network-adjacent attacker to execute arbitrary OS comman

Reporter	Title	Published	Views	Family All 7
CNNVD	ELECOM 多款产品操作系统命令注入漏洞	6 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-20739	7 Jul 202107:05	–	cvelist
EUVD	EUVD-2021-8153	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in Elecom routers	7 Jul 202105:03	–	jvn
NVD	CVE-2021-20739	7 Jul 202108:15	–	nvd
Prion	Command injection	7 Jul 202108:15	–	prion
RedhatCVE	CVE-2021-20739	22 May 202519:08	–	redhatcve

NVD

Node

elecom wrc-300febk_firmware

AND

elecom wrc-300febkMatch-

Node

elecom wrc-f300nf_firmware

AND

elecom wrc-f300nfMatch-

Node

elecom wrc-733febk_firmware

AND

elecom wrc-733febkMatch-

Node

elecom wrh-300rd_firmware

AND

elecom wrh-300rdMatch-

Node

elecom wrh-300bk_firmware

AND

elecom wrh-300bkMatch-

Node

elecom wrh-300sv_firmware

AND

elecom wrh-300svMatch-

Node

elecom wrh-300wh_firmware

AND

elecom wrh-300whMatch-

Node

elecom wrh-h300wh_firmware

AND

elecom wrh-h300whMatch-

Node

elecom wrh-h300bk_firmware

AND

elecom wrh-h300bkMatch-

Node

elecom wrh-300bk-s_firmware

AND

elecom wrh-300bk-sMatch-

Node

elecom wrh-300wh-s_firmware

AND

elecom wrh-300wh-sMatch-

[
  {
    "product": "WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S",
    "vendor": "ELECOM CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

Source	Link
elecom	www.elecom.co.jp/news/security/20210706-01/
jvn	www.jvn.jp/en/vu/JVNVU94260088/index.html

21 Nov 2024 05:47Current

8.8High risk

Vulners AI Score8.8

CVSS 25.8

CVSS 3.18.8

EPSS0.00333

CWE-78