CVE-2021-20739

WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
elecomwrc-300febk_firmware
*
elecomwrc-f300nf_firmware
*
elecomwrc-733febk_firmware
*
elecomwrh-300rd_firmware
*
elecomwrh-300bk_firmware
*
elecomwrh-300sv_firmware
*
elecomwrh-300wh_firmware
*
elecomwrh-h300wh_firmware
*
elecomwrh-h300bk_firmware
*
elecomwrh-300bk-s_firmware
*
elecomwrh-300wh-s_firmware
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jvn.jp/en/vu/JVNVU94260088/index.html
https://www.elecom.co.jp/news/security/20210706-01/
https://jvn.jp/en/vu/JVNVU94260088/index.html
https://www.elecom.co.jp/news/security/20210706-01/