Lucene search

[email protected]NVD:CVE-2021-20739

HistoryJul 07, 2021 - 8:15 a.m.

CVE-2021-20739

2021-07-0708:15:07

CWE-78

[email protected]

web.nvd.nist.gov

cve-2021-20739

network-adjacent attacker

unauthenticated

arbitrary os command

wrc-300febk

wrc-f300nf

wrc-733febk

wrh-300rd

wrh-300bk

wrh-300sv

wrh-300wh

wrh-h300wh

wrh-h300bk

wrh-300bk-s

wrh-300wh-s

unspecified vectors

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.5%

JSON

WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.

Affected configurations

Nvd

Node

elecomwrc-300febkMatch-

AND

elecomwrc-300febk_firmware

Node

elecomwrc-f300nfMatch-

AND

elecomwrc-f300nf_firmware

Node

elecomwrc-733febkMatch-

AND

elecomwrc-733febk_firmware

Node

elecomwrh-300rdMatch-

AND

elecomwrh-300rd_firmware

Node

elecomwrh-300bkMatch-

AND

elecomwrh-300bk_firmware

Node

elecomwrh-300svMatch-

AND

elecomwrh-300sv_firmware

Node

elecomwrh-300whMatch-

AND

elecomwrh-300wh_firmware

Node

elecomwrh-h300whMatch-

AND

elecomwrh-h300wh_firmware

Node

elecomwrh-h300bk_firmware

AND

elecomwrh-h300bkMatch-

Node

elecomwrh-300bk-s_firmware

AND

elecomwrh-300bk-sMatch-

Node

elecomwrh-300wh-s_firmware

AND

elecomwrh-300wh-sMatch-

VendorProductVersionCPE
elecomwrc-300febk-cpe:2.3:h:elecom:wrc-300febk:-:*:*:*:*:*:*:*
elecomwrc-300febk_firmware*cpe:2.3:o:elecom:wrc-300febk_firmware:*:*:*:*:*:*:*:*
elecomwrc-f300nf-cpe:2.3:h:elecom:wrc-f300nf:-:*:*:*:*:*:*:*
elecomwrc-f300nf_firmware*cpe:2.3:o:elecom:wrc-f300nf_firmware:*:*:*:*:*:*:*:*
elecomwrc-733febk-cpe:2.3:h:elecom:wrc-733febk:-:*:*:*:*:*:*:*
elecomwrc-733febk_firmware*cpe:2.3:o:elecom:wrc-733febk_firmware:*:*:*:*:*:*:*:*
elecomwrh-300rd-cpe:2.3:h:elecom:wrh-300rd:-:*:*:*:*:*:*:*
elecomwrh-300rd_firmware*cpe:2.3:o:elecom:wrh-300rd_firmware:*:*:*:*:*:*:*:*
elecomwrh-300bk-cpe:2.3:h:elecom:wrh-300bk:-:*:*:*:*:*:*:*
elecomwrh-300bk_firmware*cpe:2.3:o:elecom:wrh-300bk_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
elecom	wrc-300febk	-	cpe:2.3:h:elecom:wrc-300febk:-:::::::*
elecom	wrc-300febk_firmware	*	cpe:2.3:o:elecom:wrc-300febk_firmware::::::::
elecom	wrc-f300nf	-	cpe:2.3:h:elecom:wrc-f300nf:-:::::::*
elecom	wrc-f300nf_firmware	*	cpe:2.3:o:elecom:wrc-f300nf_firmware::::::::
elecom	wrc-733febk	-	cpe:2.3:h:elecom:wrc-733febk:-:::::::*
elecom	wrc-733febk_firmware	*	cpe:2.3:o:elecom:wrc-733febk_firmware::::::::
elecom	wrh-300rd	-	cpe:2.3:h:elecom:wrh-300rd:-:::::::*
elecom	wrh-300rd_firmware	*	cpe:2.3:o:elecom:wrh-300rd_firmware::::::::
elecom	wrh-300bk	-	cpe:2.3:h:elecom:wrh-300bk:-:::::::*
elecom	wrh-300bk_firmware	*	cpe:2.3:o:elecom:wrh-300bk_firmware::::::::

Rows per page:

1-10 of 221

References

jvn.jp/en/vu/JVNVU94260088/index.html

www.elecom.co.jp/news/security/20210706-01/

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.5%

JSON

Related for NVD:CVE-2021-20739

cvelist1 cve1 prion1