CVE-2021-20844

🗓️ 24 Nov 2021 08:25:45Reported by jpcertType

Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-20844	24 Nov 202118:27	–	circl
CNNVD	yamaha 部分产品信息泄露漏洞	24 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-20844	24 Nov 202108:25	–	cvelist
EUVD	EUVD-2021-8254	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in multiple Yamaha routers	24 Dec 202101:51	–	jvn
NVD	CVE-2021-20844	24 Nov 202116:15	–	nvd
Prion	Input validation	24 Nov 202116:15	–	prion
RedhatCVE	CVE-2021-20844	22 May 202521:00	–	redhatcve

NVD

Node

yamaha rtx830_firmwareRange≤15.02.17

AND

yamaha rtx830Match-

Node

yamaha nvr510_firmwareRange≤15.01.18

AND

yamaha nvr510Match-

Node

yamaha nvr700w_firmwareRange≤15.00.19

AND

yamaha nvr700wMatch-

Node

yamaha rtx1210_firmwareRange≤14.01.38

AND

yamaha rtx1210Match-

Node

ntt-west biz_box_rtx830_firmwareRange≤15.02.17

AND

ntt-west biz_box_rtx830Match-

Node

ntt-west biz_box_nvr510_firmwareRange<15.01.18

AND

ntt-west biz_box_nvr510Match-

Node

ntt-west biz_box_nvr700w_firmwareRange≤15.00.19

AND

ntt-west biz_box_nvr700wMatch-

Node

ntt-west biz_box_rtx1210_firmwareRange≤14.01.38

AND

ntt-west biz_box_rtx1210Match-

[
  {
    "product": "RTX830, NVR510, NVR700W, RTX1210",
    "vendor": "Yamaha Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, RTX1210 Rev.14.01.38 and earlier"
      }
    ]
  }
]

Source	Link
ntt-west	www.ntt-west.co.jp/smb/kiki_info/info/211109.html
business	www.business.ntt-east.co.jp/topics/2021/11_09.html
rtpro	www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91161784.html
jvn	www.jvn.jp/en/vu/JVNVU91161784/index.html

21 Nov 2024 05:47Current

5.1Medium risk

Vulners AI Score5.1

CVSS 23.5

CVSS 3.15.7

EPSS0.00338

CWE-116