632 matches found
CVE-2021-20853
ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...
CVE-2021-20853
CVE-2021-20853 affects ELECOM LAN routers (WRH-733GBK/GWH), with firmware v1.02.9 and earlier, and is described as an OS command injection vulnerability that allows a network-adjacent attacker with administrator privileges to execute arbitrary OS commands via unspecified vectors. Connected record...
CVE-2021-20852
Buffer overflow vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors...
CVE-2021-20852
CVE-2021-20852 is a buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK/WRH-733GWH firmwares <= v1.02.9) that allows a network-adjacent attacker with administrator privileges to execute arbitrary OS commands via unspecified vectors. Connected sources (Red Hat, JVN, CVE listings) co...
CVE-2021-20863: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in ELECOM routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...
CVE-2021-20855: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...
Elecom Edwrc 操作系统操作系统命令注入漏洞
The Elecom Edwrc is a series of routers from Elecom Japan. The Elecom Edwrc suffers from an operating system command injection vulnerability that originates from a network system or product not properly filtering specific elements of the data entered externally to the ELECOM router during the...
CVE-2021-20862: Undefined Security Weakness
Improper access control vulnerability in ELECOM routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...
CVE-2021-20857: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...
elecom lan routers access control error vulnerability
elecom lan routers is a router from Elecom Japan. An access control error vulnerability exists in elecom lan routers, which can be exploited by an attacker to bypass access restrictions and gain access to the product's administration screens via an unspecified vector...
elecom lan routers buffer overflow vulnerability
elecom lan routers is a router from Elecom Japan. A buffer overflow vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...
CVE-2021-20859: Improper Neutralization of Special Elements used in an OS Command
ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior,...
CVE-2021-20856: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...
elecom lan routers cross-site scripting vulnerability
elecom lan routers is a router from Elecom Japan. elecom lan routers is vulnerable to cross-site scripting, which can be exploited to inject arbitrary scripts via unspecified vectors...
CVE-2021-20860: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and...
CVE-2021-20853: Improper Neutralization of Special Elements used in an OS Command
ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...
CVE-2021-20864: Undefined Security Weakness
Improper access control vulnerability in ELECOM routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...
CVE-2021-20852: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors...
CVE-2021-20861: Undefined Security Weakness
Improper access control vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...
CVE-2021-20858: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...