CVE-2021-20711

Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20711

CVE-2021-20711 affects NEC Aterm WG2600HS firmware (versions 1.5.1 and earlier). The vulnerability enables an attacker to execute arbitrary OS commands via unspecified vectors, with the specific CVE recognized in multiple sources (including JVN and CVE entries). The JVN/CNNVD/CVE records and rela...

CVE-2021-20712

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function...

CVE-2021-20712

CVE-2021-20712 affects NEC Aterm WG2600HS (firmware ≤1.5.1) and WX3000HP (≤1.1.2), where an IPv6 firewall defect enables access from WAN to devices on the LAN. The connected JVN entry additionally lists affected product families and other entries, but this CVE’s core detail is an improper access ...

CVE-2021-20710

Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-20710

CVE-2021-20710 is an XSS vulnerability impacting NEC Aterm WG2600HS firmware versions 1.5.1 and earlier. The vulnerability allows an attacker to cause arbitrary script execution in the user’s browser via unspecified vectors, with impact described as executing scripts in the browser. The JVN/Japan...

CVE-2021-20708

NEC Aterm devices Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allow authenticated attackers to execute arbitrary OS commands by sending a specially crafted request to a specific URL...

CVE-2021-20709

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

CVE-2021-20708

CVE-2021-20708 affects NEC Aterm devices (WF1200CR: v1.3.2 and earlier; WG1200CR: v1.3.3 and earlier; WG2600HS: v1.5.1 and earlier) and allows authenticated attackers to execute arbitrary OS commands by sending a crafted request to a specific URL. Connected sources also reference related CVEs in ...

CVE-2021-20709

CVE-2021-20709 describes an improper validation of the integrity check value in NEC Aterm WF1200CR (firmware ≤1.3.2), Aterm WG1200CR (≤1.3.3), and Aterm WG2600HS (≤1.5.1). The flaw allows an authenticated/administrative attacker to execute arbitrary OS commands by sending a specially crafted requ...

CVE-2021-20680

CVE-2021-20680 is a cross-site scripting vulnerability in NEC Aterm devices. The issue affects multiple models and firmware versions (e.g., WG1900HP2/WG1900HP, WG1800HP4/3, WG1200HS2/HP3/HP2, W1200EX/EX-MS, WG1200HS/HP, WF800HP, WF300HP2, WR8165N, W500P, W300P, and others) and allows remote attac...

CVE-2021-20680

Cross-site scripting vulnerability in NEC Aterm devices Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier,...

NEC Aterm Information Disclosure Vulnerability

The NEC Aterm is a wireless router from Nippon Electric NEC. NEC Aterm is vulnerable to an information disclosure vulnerability that could allow a remote user to execute arbitrary shell commands on the target system. No details of the vulnerability are provided at this time...

Multiple vulnerabilities in multiple Aterm products

Overview Multiple Aterm products provided by NEC Corporation contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2021-20680 OS command injection via UPnP CWE-78 - CVE-2014-8361 CVE-2021-20680 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this...

Multiple vulnerabilities in Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP

Overview Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP provided by NEC Corporation contain multiple vulnerabilities listed below. Aterm WF1200CR, Aterm WG1200CR, and Aterm WG2600HS OS Command Injection CWE-78 - CVE-2021-20708 Improper Validation of Integrity Check Value CWE-3...

JVN#29739718: Multiple vulnerabilities in Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP

Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP provided by NEC Corporation contain multiple vulnerabilities listed below. Aterm WF1200CR, Aterm WG1200CR, and Aterm WG2600HS OS Command Injection CWE-78 - CVE-2021-20708 Version| Vector| Score ---|---|--- CVSS v3|...

JVN#67456944: Multiple vulnerabilities in multiple Aterm products

Multiple Aterm products provided by NEC Corporation contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2021-20680 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base Score...

NEC Aterm WG2600HS 跨站脚本漏洞

The NEC Aterm WG2600HS is a wireless router from Japan Electric NEC. A cross-site scripting vulnerability exists in the Aterm WF1200CR version 1.5.1, which allows remote attackers to perform cross-site scripting XSS attacks...

NEC Aterm 跨站脚本漏洞

NEC Aterm is a wireless router from Nippon Electric NEC. A security vulnerability exists in multiple NEC Aterm products that results from improper validation of user-supplied input...

NEC Aterm WF1200C 操作系统命令注入漏洞

The NEC Aterm WF1200C is a wireless router from Nippon Electric NEC. A security vulnerability exists in Aterm WF1200CR: version 1.3.2, version 1.3.3, and version 1.5.1, which allows remote users to execute arbitrary shell commands on the target system...