CVE-2021-20861

🗓️ 01 Dec 2021 02:15:55Reported by jpcertType

Improper access control vulnerability in ELECOM LAN routers allows authenticated attacker to bypass access restriction and access management screen (CVE-2021-20861)

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-20861	1 Dec 202107:35	–	circl
CNNVD	elecom lan 授权问题漏洞	30 Nov 202100:00	–	cnnvd
CNVD	elecom lan routers access control error vulnerability	1 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-20861	1 Dec 202102:15	–	cvelist
EUVD	EUVD-2021-8270	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#88993473: Multiple vulnerabilities in multiple ELECOM LAN routers	30 Nov 202100:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in multiple ELECOM LAN routers	30 Nov 202107:23	–	jvn
NVD	CVE-2021-20861	1 Dec 202103:15	–	nvd
Prion	Improper access control	1 Dec 202103:15	–	prion
RedhatCVE	CVE-2021-20861	22 May 202520:59	–	redhatcve

NVD

Vulners

Node

elecom wrc-1167gst2_firmwareRange≤1.25

AND

elecom wrc-1167gst2Match-

Node

elecom wrc-1167gst2a_firmwareRange≤1.25

AND

elecom wrc-1167gst2aMatch-

Node

elecom wrc-1167gst2h_firmwareRange≤1.25

AND

elecom wrc-1167gst2hMatch-

Node

elecom wrc-2533gs2-b_firmwareRange≤1.52

AND

elecom wrc-2533gs2-bMatch-

Node

elecom wrc-2533gs2-w_firmwareRange≤1.52

AND

elecom wrc-2533gs2-wMatch-

Node

elecom wrc-1750gs_firmwareRange≤1.03

AND

elecom wrc-1750gsMatch-

Node

elecom wrc-1750gsv_firmwareRange≤2.11

AND

elecom wrc-1750gsvMatch-

Node

elecom wrc-1900gst_firmwareRange≤1.03

AND

elecom wrc-1900gstMatch-

Node

elecom wrc-2533gst_firmwareRange≤1.03

AND

elecom wrc-2533gstMatch-

Node

elecom wrc-2533gst2_firmwareRange≤1.25

AND

elecom wrc-2533gst2Match-

Node

elecom wrc-2533gsta_firmwareRange≤1.03

AND

elecom wrc-2533gstaMatch-

Node

elecom wrc-2533gst2sp_firmwareRange≤1.25

AND

elecom wrc-2533gst2spMatch-

Node

elecom wrc-2533gst2-g_firmwareRange≤1.25

AND

elecom wrc-2533gst2-gMatch-

Node

elecom edwrc-2533gst2_firmwareRange≤1.25

AND

elecom edwrc-2533gst2Match-

[
  {
    "product": "ELECOM LAN routers",
    "vendor": "ELECOM CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN88993473/index.html
elecom	www.elecom.co.jp/news/security/20211130-01/

21 Nov 2024 05:47Current

8.3High risk

Vulners AI Score8.3

CVSS 25.8

CVSS 3.18.8

EPSS0.00155