Lucene search

K
cvelistJpcertCVELIST:CVE-2021-20847
HistoryDec 01, 2021 - 2:15 a.m.

CVE-2021-20847

2021-12-0102:15:37
jpcert
www.cve.org
3
wi-fi
cross-site scripting
vulnerability
webui
remote unauthenticated attacker
arbitrary script
cve-2021-20847

EPSS

0.001

Percentile

39.0%

Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device.

CNA Affected

[
  {
    "product": "Wi-Fi STATION SH-52A",
    "vendor": "NTT DOCOMO, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C"
      }
    ]
  }
]

EPSS

0.001

Percentile

39.0%

Related for CVELIST:CVE-2021-20847