CVE-2021-20843

🗓️ 24 Nov 2021 08:25:44Reported by jpcertType

Web GUI of RTX830, NVR510, NVR700W, and RTX1210 allows remote authenticated attacker to alter settings via crafted web page

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-20843	24 Nov 202118:26	–	circl
CNNVD	多款 Yamaha 跨站脚本漏洞	24 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-20843	24 Nov 202108:25	–	cvelist
EUVD	EUVD-2021-8253	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in multiple Yamaha routers	24 Dec 202101:51	–	jvn
NVD	CVE-2021-20843	24 Nov 202116:15	–	nvd
OSV	CVE-2021-20843	24 Nov 202116:15	–	osv
Prion	Cross site scripting	24 Nov 202116:15	–	prion
RedhatCVE	CVE-2021-20843	22 May 202520:59	–	redhatcve

NVD

Node

yamaha rtx830_firmwareRange≤15.02.17

AND

yamaha rtx830Match-

Node

yamaha nvr510_firmwareRange≤15.01.18

AND

yamaha nvr510Match-

Node

yamaha nvr700w_firmwareRange≤15.00.19

AND

yamaha nvr700wMatch-

Node

yamaha rtx1210_firmwareRange≤14.01.38

AND

yamaha rtx1210Match-

Node

ntt-west biz_box_rtx830_firmwareRange≤15.02.17

AND

ntt-west biz_box_rtx830Match-

Node

ntt-west biz_box_nvr510_firmwareRange<15.01.18

AND

ntt-west biz_box_nvr510Match-

Node

ntt-west biz_box_nvr700w_firmwareRange≤15.00.19

AND

ntt-west biz_box_nvr700wMatch-

Node

ntt-west biz_box_rtx1210_firmwareRange≤14.01.38

AND

ntt-west biz_box_rtx1210Match-

[
  {
    "product": "RTX830, NVR510, NVR700W, RTX1210",
    "vendor": "Yamaha Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, RTX1210 Rev.14.01.38 and earlier"
      }
    ]
  }
]

Source	Link
ntt-west	www.ntt-west.co.jp/smb/kiki_info/info/211109.html
business	www.business.ntt-east.co.jp/topics/2021/11_09.html
rtpro	www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91161784.html
jvn	www.jvn.jp/en/vu/JVNVU91161784/index.html

21 Nov 2024 05:47Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 3.15.4

EPSS0.00283

CWE-829