CVE-2021-20855

CVE-2021-20855 is an XSS vulnerability in ELECOM LAN routers. It affects WRH-733GBK (firmware v1.02.9 and earlier) and WRH-733GWH (v1.02.9 and earlier). The issue allows a remote authenticated attacker to inject arbitrary script via unspecified vectors, potentially impacting users’ browsers. Affe...

CVE-2021-20855

Cross-site scripting vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20854

CVE-2021-20854 concerns ELECOM LAN routers where a network-adjacent attacker with administrative privileges can execute arbitrary OS commands via unspecified vectors. The primary affected devices documented include WRH-733GBK firmware v1.02.9 and earlier and WRH-733GWH firmware v1.02.9 and earlie...

CVE-2021-20853

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20853

CVE-2021-20853 affects ELECOM LAN routers (WRH-733GBK/GWH), with firmware v1.02.9 and earlier, and is described as an OS command injection vulnerability that allows a network-adjacent attacker with administrator privileges to execute arbitrary OS commands via unspecified vectors. Connected record...

CVE-2021-20852

Buffer overflow vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors...

CVE-2021-20852

CVE-2021-20852 is a buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK/WRH-733GWH firmwares <= v1.02.9) that allows a network-adjacent attacker with administrator privileges to execute arbitrary OS commands via unspecified vectors. Connected sources (Red Hat, JVN, CVE listings) co...

elecom lan routers operating system command injection vulnerability

elecom lan routers is a router from Elecom Japan. An operating system command injection vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

CVE-2021-20853: Improper Neutralization of Special Elements used in an OS Command

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

PT-2021-14299

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.02.9 and prior Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For versions 1.02.9 and prior, update to a...

CVE-2021-20857: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20860: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and...

CVE-2021-20861: Undefined Security Weakness

Improper access control vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

CVE-2021-20852: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors...

PT-2021-14304

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.03 and prior ELECOM LAN routers versions 1.25 and prior ELECOM LAN routers versions 1.52 and prior ELECOM LAN routers versions 2.11 and prior Description: An improper access control issue in ELECOM LAN routers...

PT-2021-14302

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.03 and prior ELECOM LAN routers versions 1.25 and prior ELECOM LAN routers versions 1.52 and prior ELECOM LAN routers versions 2.11 and prior Description: The issue allows a network-adjacent authenticated attacke...

PT-2021-14296

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers WRH-733GBK versions 1.02.9 and prior ELECOM LAN routers WRH-733GWH versions 1.02.9 and prior Description: The issue allows a network-adjacent attacker with administrator privilege to execute arbitrary OS commands via...

elecom lan routers cross-site request forgery vulnerability

elecom lan routers is a router from Elecom Japan. A cross-site request forgery vulnerability exists in elecom lan routers, which can be exploited by an attacker to hijack administrator authentication via a specially crafted page...

PT-2021-14303

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.03 and prior ELECOM LAN routers versions 1.25 and prior ELECOM LAN routers versions 1.52 and prior ELECOM LAN routers versions 2.11 and prior Description: A cross-site request forgery CSRF issue allows a remote...

PT-2021-14300

Name of the Vulnerable Software and Affected Versions: ELECOM LAN router WRC-2533GHBK-I versions 1.20 and prior Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For ELECOM LAN router...