CVE-2021-20712

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.3%
top 51.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
NEC Aterm Wg2600hs FirmwareNEC Aterm Wx3000hp FirmwareNEC Corporation NEC Aterm Devices
Timeline
PublishedApr 26
Latest updateMay 24

Description

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5nec_corporation/nec_aterm_devicesAterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier

🔴Vulnerability Details

2
GHSA
GHSA-c7vp-4m6m-jg9v: Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1↗2022-05-24
▶
CVEList
CVE-2021-20712: Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1↗2021-04-26
▶
CVE-2021-20712 (MEDIUM CVSS 5.3) | Improper access control vulnerabili | cvebase.io