CVE-2021-20680 — MEDIUM (6.1)

Q: How severe is CVE-2021-20680?

CVE-2021-20680 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2021-20680?

Check the references section above for vendor advisories and patch information. Affected products include: Nec Aterm Wg1900Hp2 Firmware, Nec Aterm Wg1900Hp2, Nec Aterm Wg1900Hp Firmware, Nec Aterm Wg1900Hp, Nec Aterm Wg1800Hp4 Firmware.

Vulnerability Description

Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier, Aterm WG1200HP3 firmware Ver.1.3.1 and earlier, Aterm WG1200HP2 firmware Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, Aterm WG1200HS firmware all versions Aterm WG1200HP firmware all versions Aterm WF800HP firmware all versions Aterm WF300HP2 firmware all versions Aterm WR8165N firmware all versions Aterm W500P firmware all versions, and Aterm W300P firmware all versions) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Nec	Aterm Wg1900Hp2 Firmware	<= 1.3.1
Nec	Aterm Wg1900Hp2	-
Nec	Aterm Wg1900Hp Firmware	<= 2.5.1
Nec	Aterm Wg1900Hp	-
Nec	Aterm Wg1800Hp4 Firmware	<= 1.3.1
Nec	Aterm Wg1800Hp4	-
Nec	Aterm Wg1800Hp3 Firmware	<= 1.5.1
Nec	Aterm Wg1800Hp3	-
Nec	Aterm Wg1200Hs3 Firmware	<= 1.1.2
Nec	Aterm Wg1200Hs3	-
Nec	Aterm Wg1200Hs2 Firmware	<= 2.5.0
Nec	Aterm Wg1200Hs2	-
Nec	Aterm Wg1200Hp3 Firmware	<= 1.3.1
Nec	Aterm Wg1200Hp3	-
Nec	Aterm Wg1200Hp2 Firmware	<= 2.5.0
Nec	Aterm Wg1200Hp2	-
Nec	Aterm W1200Ex Firmware	<= 1.3.1
Nec	Aterm W1200Ex	-
Nec	Aterm W1200Ex-Ms Firmware	<= 1.3.1
Nec	Aterm W1200Ex-Ms	-

Related Weaknesses (CWE)

CWE-79

References

https://jpn.nec.com/security-info/secinfo/nv21-008.htmlVendor Advisory
https://jvn.jp/en/jp/JVN67456944/index.htmlThird Party Advisory
https://jpn.nec.com/security-info/secinfo/nv21-008.htmlVendor Advisory
https://jvn.jp/en/jp/JVN67456944/index.htmlThird Party Advisory

FAQ

What is CVE-2021-20680?

CVE-2021-20680 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, ...

How severe is CVE-2021-20680?

CVE-2021-20680 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-20680?

Check the references section above for vendor advisories and patch information. Affected products include: Nec Aterm Wg1900Hp2 Firmware, Nec Aterm Wg1900Hp2, Nec Aterm Wg1900Hp Firmware, Nec Aterm Wg1900Hp, Nec Aterm Wg1800Hp4 Firmware.