CVE-2021-20621

Опубликовано: 28 янв. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Ссылки

https://jpn.nec.com/security-info/secinfo/nv21-005.html
Third Party Advisory
https://jvn.jp/en/jp/JVN38248512/index.html
Third Party Advisory
https://www.aterm.jp/support/tech/2019/0328.html
Patch
Vendor Advisory
https://jpn.nec.com/security-info/secinfo/nv21-005.html
Third Party Advisory
https://jvn.jp/en/jp/JVN38248512/index.html
Third Party Advisory
https://www.aterm.jp/support/tech/2019/0328.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:aterm:wg2600hp_firmware:*:*:*:*:*:*:*:*

Версия до 1.0.2 (включая)

cpe:2.3:h:aterm:wg2600hp:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:aterm:wg2600hp2_firmware:*:*:*:*:*:*:*:*

Версия до 1.0.2 (включая)

cpe:2.3:h:aterm:wg2600hp2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00155

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-6r2v-76j8-x9vv

github

больше 3 лет назад