CVE-2021-20864

🗓️ 01 Dec 2021 02:15:59Reported by jpcertType

Improper access control vulnerability in ELECOM routers, allowing network-adjacent unauthenticated attacker to bypass access restriction and execute arbitrary OS comman

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-20864	1 Dec 202107:35	–	circl
CNNVD	Elecom Edwrc 安全漏洞	1 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-20864	1 Dec 202102:15	–	cvelist
EUVD	EUVD-2021-8273	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in multiple ELECOM routers	2 Dec 202108:16	–	jvn
NVD	CVE-2021-20864	1 Dec 202103:15	–	nvd
OSV	CVE-2021-20864	1 Dec 202103:15	–	osv
Prion	Improper access control	1 Dec 202103:15	–	prion
RedhatCVE	CVE-2021-20864	22 May 202520:59	–	redhatcve

NVD

Node

elecom wrc-1167gst2_firmwareRange≤1.25

AND

elecom wrc-1167gst2Match-

Node

elecom wrc-1167gst2a_firmwareRange≤1.25

AND

elecom wrc-1167gst2aMatch-

Node

elecom wrc-1167gst2h_firmwareRange≤1.25

AND

elecom wrc-1167gst2hMatch-

Node

elecom wrc-2533gs2-b_firmwareRange≤1.52

AND

elecom wrc-2533gs2-bMatch-

Node

elecom wrc-2533gs2-w_firmwareRange≤1.52

AND

elecom wrc-2533gs2-wMatch-

Node

elecom wrc-1750gs_firmwareRange≤1.03

AND

elecom wrc-1750gsMatch-

Node

elecom wrc-1750gsv_firmwareRange≤2.11

AND

elecom wrc-1750gsvMatch-

Node

elecom wrc-1900gst_firmwareRange≤1.03

AND

elecom wrc-1900gstMatch-

Node

elecom wrc-2533gst_firmwareRange≤1.03

AND

elecom wrc-2533gstMatch-

Node

elecom wrc-2533gst2_firmwareRange≤1.25

AND

elecom wrc-2533gst2Match-

Node

elecom wrc-2533gsta_firmwareRange≤1.03

AND

elecom wrc-2533gstaMatch-

Node

elecom wrc-2533gst2sp_firmwareRange≤1.25

AND

elecom wrc-2533gst2spMatch-

Node

elecom wrc-2533gst2-g_firmwareRange≤1.25

AND

elecom wrc-2533gst2-gMatch-

Node

elecom edwrc-2533gst2_firmwareRange≤1.25

AND

elecom edwrc-2533gst2Match-

[
  {
    "product": "ELECOM routers",
    "vendor": "ELECOM CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "(WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior)"
      }
    ]
  }
]

Source	Link
elecom	www.elecom.co.jp/news/security/20211130-01/
jvn	www.jvn.jp/en/vu/JVNVU94527926/index.html

21 Nov 2024 05:47Current

8.7High risk

Vulners AI Score8.7

CVSS 28.3

CVSS 3.18.8

EPSS0.00243