CVE-2021-20644

2021-02-1206:15:47

jpcert

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JSON

ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user’s web browser by displaying a specially crafted SSID on the web setup page.

CNA Affected

[
  {
    "product": "WRC-1467GHBK-A",
    "vendor": "ELECOM CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "WRC-1467GHBK-A"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN47580234/index.html

www.elecom.co.jp/news/security/20210126-01/