CVE-2021-20854: Improper Neutralization of Special Elements used in an OS Command

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

elecom lan routers operating system command injection vulnerability

elecom lan routers is a router from Elecom Japan. An operating system command injection vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

CVE-2021-20852: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors...

CVE-2021-20858: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

Elecom Edwrc 安全漏洞

Elecom Edwrc is a series of routers from Elecom Japan. A security vulnerability exists in Elecom Edwrc that stems from ELECOM routers not properly restricting resource access from unauthorized roles...

Multiple vulnerabilities in multiple ELECOM LAN routers

Overview Multiple ELECOM LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Buffer overflow CWE-121 - CVE-2021-20852 OS command injection CWE-78 - CVE-2021-20853, CVE-2021-20854 Cross-site scripting CWE-79 - CVE-2021-20855, CVE-2021-20856 Cross-site scripting...

elecom lan 操作系统命令注入漏洞

elecom lan routers is a router from Elecom Japan. An operating system command injection vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

elecom lan 操作系统命令注入漏洞

elecom lan is a router from Elecom Japan. Elecom lan suffers from an OS command injection vulnerability that stems from improper input validation. An attacker can exploit the vulnerability to pass carefully constructed data to an application and execute arbitrary OS commands on the target system...

elecom lan 操作系统命令注入漏洞

elecom lan routers is a router from Elecom Japan. An operating system command injection vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

JVN#88993473: Multiple vulnerabilities in multiple ELECOM LAN routers

Multiple ELECOM LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Buffer overflow CWE-121 - CVE-2021-20852 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H| Base Score: 6.8 CVSS v2| AV:A/AC:L/Au:S/C:P/I:P/A:P| Base Score...

elecom lan 跨站脚本漏洞

elecom lan routers is a router from Elecom Japan. elecom lan routers is vulnerable to cross-site scripting, which can be exploited to inject arbitrary scripts via unspecified vectors...

elecom lan 授权问题漏洞

elecom lan routers is a router from Elecom Japan. An access control error vulnerability exists in elecom lan routers, which can be exploited by an attacker to bypass access restrictions and gain access to the product's administration screens via an unspecified vector...

elecom lan 跨站脚本漏洞

elecom lan routers is a router from Elecom Japan. A cross-site scripting vulnerability exists in elecom lan routers, which can be exploited by an attacker to inject arbitrary script via an unspecified vector...

elecom lan 跨站脚本漏洞

elecom lan routers is a router from Elecom Japan. A cross-site scripting vulnerability exists in elecom lan routers, which can be exploited by an attacker to inject arbitrary script via an unspecified vector...

elecom lan 跨站脚本漏洞

elecom lan routers is a router from Elecom Japan. A cross-site scripting vulnerability exists in elecom lan routers, which can be exploited by an attacker to inject arbitrary script via an unspecified vector...

elecom lan 跨站请求伪造漏洞

elecom lan routers is a router from Elecom Japan. A cross-site request forgery vulnerability exists in elecom lan routers, which can be exploited by an attacker to hijack administrator authentication via a specially crafted page...

elecom lan 跨站脚本漏洞

elecom lan is a router from Elecom Japan. A cross-site scripting vulnerability exists in elecom lan that stems from insufficient cleaning of user-supplied data. An authenticated, remote attacker could trick a victim into visiting specially crafted links within the context of a vulnerable website...

elecom lan 缓冲区错误漏洞

elecom lan routers is a router from Elecom Japan. A buffer overflow vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

Multiple vulnerabilities in Elecom routers

Overview Multiple routers provided by ELECOM CO.,LTD. contain information disclosure and OS command injection vulnerabilities. Multiple routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. WRC-1167FS-W, WRC-1167FS-B, WRC-1167FSA Information disclosure CWE-200 -...

ELECOM 多款产品安全漏洞

The Elecom ELECOM WRC and ELECOM WRH are both home-ready network cameras from Elecom Japan. A security vulnerability exists in multiple ELECOM products, which can be exploited by unauthenticated network neighbor attackers to obtain sensitive information via unspecified vectors. The following...