ZeroHour

CVE-2021-20708

CVSS 3.1
7.2 high
EPSS
1%p67
Published
()
Modified
Description

NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier) allow authenticated attackers to execute arbitrary OS commands by sending a specially crafted request to a specific URL.

Vendors
nec
Products
aterm wf1200cr firmware, aterm wg1200cr firmware, aterm wg2600hs firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.