CVE-2021-20680
Summary
| CVE | CVE-2021-20680 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-04-26 01:15:00 UTC |
| Updated | 2021-05-05 21:16:00 UTC |
| Description | Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier, Aterm WG1200HP3 firmware Ver.1.3.1 and earlier, Aterm WG1200HP2 firmware Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, Aterm WG1200HS firmware all versions Aterm WG1200HP firmware all versions Aterm WF800HP firmware all versions Aterm WF300HP2 firmware all versions Aterm WR8165N firmware all versions Aterm W500P firmware all versions, and Aterm W300P firmware all versions) allows remote attackers to inject arbitrary script or HTML via unspecified vectors. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Nec | Aterm W1200ex | - | All | All | All |
| Hardware | Nec | Aterm W1200ex-ms | - | All | All | All |
| Operating System | Nec | Aterm W1200ex-ms Firmware | All | All | All | All |
| Operating System | Nec | Aterm W1200ex Firmware | All | All | All | All |
| Hardware | Nec | Aterm W300p | - | All | All | All |
| Operating System | Nec | Aterm W300p Firmware | All | All | All | All |
| Hardware | Nec | Aterm W500p | - | All | All | All |
| Operating System | Nec | Aterm W500p Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wf300hp2 | - | All | All | All |
| Operating System | Nec | Aterm Wf300hp2 Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wf800hp | - | All | All | All |
| Operating System | Nec | Aterm Wf800hp Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wg1200hp | - | All | All | All |
| Hardware | Nec | Aterm Wg1200hp2 | - | All | All | All |
| Operating System | Nec | Aterm Wg1200hp2 Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wg1200hp3 | - | All | All | All |
| Operating System | Nec | Aterm Wg1200hp3 Firmware | All | All | All | All |
| Operating System | Nec | Aterm Wg1200hp Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wg1200hs | - | All | All | All |
| Hardware | Nec | Aterm Wg1200hs2 | - | All | All | All |
| Operating System | Nec | Aterm Wg1200hs2 Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wg1200hs3 | - | All | All | All |
| Operating System | Nec | Aterm Wg1200hs3 Firmware | All | All | All | All |
| Operating System | Nec | Aterm Wg1200hs Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wg1800hp3 | - | All | All | All |
| Operating System | Nec | Aterm Wg1800hp3 Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wg1800hp4 | - | All | All | All |
| Operating System | Nec | Aterm Wg1800hp4 Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wg1900hp | - | All | All | All |
| Hardware | Nec | Aterm Wg1900hp2 | - | All | All | All |
| Operating System | Nec | Aterm Wg1900hp2 Firmware | All | All | All | All |
| Operating System | Nec | Aterm Wg1900hp Firmware | All | All | All | All |
| Hardware | Nec | Aterm Wr8165n | - | All | All | All |
| Operating System | Nec | Aterm Wr8165n Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| JVN#67456944: Multiple vulnerabilities in multiple Aterm products | MISC | jvn.jp | |
| NV21-008: セキュリティ情報 | NEC | MISC | jpn.nec.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.