CVE-2021-20621

2021-01-2810:00:29

jpcert

www.cve.org

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.8%

JSON

Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CNA Affected

[
  {
    "product": "Aterm WG2600HP and Aterm WG2600HP2",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier"
      }
    ]
  }
]