CVE-2021-20620

CVE-2021-20620 affects NEC Aterm WF800HP firmware. The issue is a Cross-site Scripting (CWE-79) vulnerability in firmware versions 1.0.9 and earlier that allows a remote attacker to inject arbitrary scripts via unspecified vectors, potentially executing in the user’s web browser. Public sources (...

JVN#38248512: Multiple vulnerabilities in Aterm WF800HP, Aterm WG2600HP, and Aterm WG2600HP2

Aterm WF800HP, Aterm WG2600HP, and Aterm WG2600HP2 provided by NEC Corporation contain multiple vulnerabilities listed below. Aterm WF800HP: Cross-site Scripting CWE-79 - CVE-2021-20620 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS...