Vulnerabilites related to elecom - wrc-2533ghbk-i
cve-2021-20857
Vulnerability from cvelistv5
Published
2021-12-01 02:15
Modified
2024-08-03 17:53
Severity ?
EPSS score ?
Summary
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.elecom.co.jp/news/security/20211130-01/ | x_refsource_MISC | |
| https://jvn.jp/en/jp/JVN88993473/index.html | x_refsource_MISC |
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| ELECOM CO.,LTD. | ELECOM LAN router |
Version: WRC-2533GHBK-I firmware v1.20 and prior |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T17:53:22.695Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "ELECOM LAN router", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "WRC-2533GHBK-I firmware v1.20 and prior", }, ], }, ], descriptions: [ { lang: "en", value: "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", }, ], problemTypes: [ { descriptions: [ { description: "Cross-site scripting", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2021-12-01T02:15:49", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { tags: [ "x_refsource_MISC", ], url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "vultures@jpcert.or.jp", ID: "CVE-2021-20857", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "ELECOM LAN router", version: { version_data: [ { version_value: "WRC-2533GHBK-I firmware v1.20 and prior", }, ], }, }, ], }, vendor_name: "ELECOM CO.,LTD.", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Cross-site scripting", }, ], }, ], }, references: { reference_data: [ { name: "https://www.elecom.co.jp/news/security/20211130-01/", refsource: "MISC", url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { name: "https://jvn.jp/en/jp/JVN88993473/index.html", refsource: "MISC", url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2021-20857", datePublished: "2021-12-01T02:15:49", dateReserved: "2020-12-17T00:00:00", dateUpdated: "2024-08-03T17:53:22.695Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2021-20858
Vulnerability from cvelistv5
Published
2021-12-01 02:15
Modified
2024-08-03 17:53
Severity ?
EPSS score ?
Summary
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.elecom.co.jp/news/security/20211130-01/ | x_refsource_MISC | |
| https://jvn.jp/en/jp/JVN88993473/index.html | x_refsource_MISC |
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| ELECOM CO.,LTD. | ELECOM LAN router |
Version: WRC-2533GHBK-I firmware v1.20 and prior |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T17:53:22.852Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "ELECOM LAN router", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "WRC-2533GHBK-I firmware v1.20 and prior", }, ], }, ], descriptions: [ { lang: "en", value: "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", }, ], problemTypes: [ { descriptions: [ { description: "Cross-site scripting", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2021-12-01T02:15:51", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { tags: [ "x_refsource_MISC", ], url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "vultures@jpcert.or.jp", ID: "CVE-2021-20858", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "ELECOM LAN router", version: { version_data: [ { version_value: "WRC-2533GHBK-I firmware v1.20 and prior", }, ], }, }, ], }, vendor_name: "ELECOM CO.,LTD.", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Cross-site scripting", }, ], }, ], }, references: { reference_data: [ { name: "https://www.elecom.co.jp/news/security/20211130-01/", refsource: "MISC", url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { name: "https://jvn.jp/en/jp/JVN88993473/index.html", refsource: "MISC", url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2021-20858", datePublished: "2021-12-01T02:15:51", dateReserved: "2020-12-17T00:00:00", dateUpdated: "2024-08-03T17:53:22.852Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-43757
Vulnerability from cvelistv5
Published
2023-11-16 06:21
Modified
2024-08-02 19:52
Severity ?
EPSS score ?
Summary
Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.
References
Impacted products
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T19:52:10.967Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20231114-01/", }, { tags: [ "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { tags: [ "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20210706-01/", }, { tags: [ "x_transferred", ], url: "https://jvn.jp/en/vu/JVNVU94119876/", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "WRC-2533GHBK2-T", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-2533GHBK-I", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1750GHBK2-I", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1750GHBK-E", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1750GHBK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1167GHBK2", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1167GHBK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-F1167ACF", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-733GHBK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-733GHBK-I", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-733GHBK-C", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-300GHBK2-I", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-300GHBK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-733FEBK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-300FEBK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-F300NF", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300WH-H", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300BK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300WH", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300RD", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300SV", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300BK-S", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300WH-S", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300BK2-S", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-300WH2-S", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-H300BK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-H300WH", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-150BK", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRH-150WH", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "LAN-W300N/RS", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "LAN-W301NR", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "LAN-W300N/P", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "LAN-WH300N/DGP", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "LAN-WH300NDGPE", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, ], descriptions: [ { lang: "en", value: "Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.", }, ], problemTypes: [ { descriptions: [ { description: "Inadequate Encryption Strength", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-11-16T06:42:13.507Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://www.elecom.co.jp/news/security/20231114-01/", }, { url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { url: "https://www.elecom.co.jp/news/security/20210706-01/", }, { url: "https://jvn.jp/en/vu/JVNVU94119876/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2023-43757", datePublished: "2023-11-16T06:21:13.445Z", dateReserved: "2023-10-31T07:10:40.728Z", dateUpdated: "2024-08-02T19:52:10.967Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2023-11-16 07:15
Modified
2024-11-21 08:24
Severity ?
Summary
Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| vultures@jpcert.or.jp | https://jvn.jp/en/vu/JVNVU94119876/ | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20210706-01/ | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20230810-01/ | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20231114-01/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/vu/JVNVU94119876/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20210706-01/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20230810-01/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20231114-01/ | Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| elecom | wrc-2533ghbk2-t_firmware | - | |
| elecom | wrc-2533ghbk2-t | - | |
| elecom | wrc-2533ghbk-i_firmware | - | |
| elecom | wrc-2533ghbk-i | - | |
| elecom | wrc-1750ghbk2-i_firmware | - | |
| elecom | wrc-1750ghbk2-i | - | |
| elecom | wrc-1750ghbk-e_firmware | - | |
| elecom | wrc-1750ghbk-e | - | |
| elecom | wrc-1750ghbk_firmware | - | |
| elecom | wrc-1750ghbk | - | |
| elecom | wrc-1167ghbk2_firmware | - | |
| elecom | wrc-1167ghbk2 | - | |
| elecom | wrc-1167ghbk_firmware | - | |
| elecom | wrc-1167ghbk | - | |
| elecom | wrc-f1167acf_firmware | - | |
| elecom | wrc-f1167acf | - | |
| elecom | wrc-733ghbk_firmware | - | |
| elecom | wrc-733ghbk | - | |
| elecom | wrc-733ghbk-i_firmware | - | |
| elecom | wrc-733ghbk-i | - | |
| elecom | wrc-733ghbk-c_firmware | - | |
| elecom | wrc-733ghbk-c | - | |
| elecom | wrc-300ghbk2-i_firmware | - | |
| elecom | wrc-300ghbk2-i | - | |
| elecom | wrc-300ghbk_firmware | - | |
| elecom | wrc-300ghbk | - | |
| elecom | wrc-733febk_firmware | - | |
| elecom | wrc-733febk | - | |
| elecom | wrc-300febk_firmware | - | |
| elecom | wrc-300febk | - | |
| elecom | wrc-f300nf_firmware | - | |
| elecom | wrc-f300nf | - | |
| elecom | wrh-300wh-h_firmware | - | |
| elecom | wrh-300wh-h | - | |
| elecom | wrh-300bk_firmware | - | |
| elecom | wrh-300bk | - | |
| elecom | wrh-300wh_firmware | - | |
| elecom | wrh-300wh | - | |
| elecom | wrh-300rd_firmware | - | |
| elecom | wrh-300rd | - | |
| elecom | wrh-300sv_firmware | - | |
| elecom | wrh-300sv | - | |
| elecom | wrh-300bk-s_firmware | - | |
| elecom | wrh-300bk-s | - | |
| elecom | wrh-300wh-s_firmware | - | |
| elecom | wrh-300wh-s | - | |
| elecom | wrh-300bk2-s_firmware | - | |
| elecom | wrh-300bk2-s | - | |
| elecom | wrh-300wh2-s_firmware | - | |
| elecom | wrh-300wh2-s | - | |
| elecom | wrh-h300bk_firmware | - | |
| elecom | wrh-h300bk | - | |
| elecom | wrh-h300wh_firmware | - | |
| elecom | wrh-h300wh | - | |
| elecom | wrh-150bk_firmware | - | |
| elecom | wrh-150bk | - | |
| elecom | wrh-150wh_firmware | - | |
| elecom | wrh-150wh | - | |
| elecom | lan-w300n\/rs_firmware | - | |
| elecom | lan-w300n\/rs | - | |
| elecom | lan-w301nr_firmware | - | |
| elecom | lan-w301nr | - | |
| elecom | lan-w300n\/p_firmware | - | |
| elecom | lan-w300n\/p | - | |
| elecom | lan-wh300n\/dgp_firmware | - | |
| elecom | lan-wh300n\/dgp | - | |
| elecom | lan-wh300ndgpe_firmware | - | |
| elecom | lan-wh300ndgpe | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-2533ghbk2-t_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "416614AE-FE5E-4807-8AB0-618F46E48C4F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-2533ghbk2-t:-:*:*:*:*:*:*:*", matchCriteriaId: "991548FF-6EAD-422F-B2CF-316E96FB7F6F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-2533ghbk-i_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "65FF48A0-3059-4969-9C7D-D12B1E164DE6", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-2533ghbk-i:-:*:*:*:*:*:*:*", matchCriteriaId: "DDD11C2A-1EC2-420D-B2AE-FEB67E9866FF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1750ghbk2-i_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "68DEE867-A37C-4199-BE44-222706725533", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1750ghbk2-i:-:*:*:*:*:*:*:*", matchCriteriaId: "E1EAF366-E7EB-4864-BB1C-16D828141CFD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1750ghbk-e_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "7AE44EDE-A5BD-486D-9225-A44BAAB39132", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1750ghbk-e:-:*:*:*:*:*:*:*", matchCriteriaId: "DDB8292C-ABDA-4F61-8EF1-D498AE3BF66C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1750ghbk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "D6E65402-982D-4E0D-A257-806118DBE50A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1750ghbk:-:*:*:*:*:*:*:*", matchCriteriaId: "5D1F1675-60C1-4150-8306-1592F88D3DAC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1167ghbk2_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "8D00FC11-2C8D-4B88-BB15-157F9C7DBA88", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1167ghbk2:-:*:*:*:*:*:*:*", matchCriteriaId: "7DF1D75E-EF09-4BF7-AC5C-F6CDC5B6ED8E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1167ghbk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2F2F7444-D3CE-4C5B-B021-4EA615442478", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1167ghbk:-:*:*:*:*:*:*:*", matchCriteriaId: "A69B25FE-0AF4-49CC-9F10-8F98AFF7CCBB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-f1167acf_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "60F558FC-55E4-4DF5-B01D-319A03CE0814", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-f1167acf:-:*:*:*:*:*:*:*", matchCriteriaId: "C244EA13-D45C-4968-A330-3AD80F588537", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-733ghbk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "DE82FE52-F2A1-4B9D-B618-7B8D82C497A4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-733ghbk:-:*:*:*:*:*:*:*", matchCriteriaId: "ED2A27DD-B40D-4415-8CCE-063427864910", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-733ghbk-i_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "8E9761CF-F0A3-4ACF-B7C0-8BF6EB5F8408", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-733ghbk-i:-:*:*:*:*:*:*:*", matchCriteriaId: "1900274E-7B26-4183-8912-70BCCC306FF8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-733ghbk-c_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "DB404C76-CCEB-4242-B602-8A4F93C9F3FA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-733ghbk-c:-:*:*:*:*:*:*:*", matchCriteriaId: "0ED75E24-5232-4CD1-A8D5-96ECCC3C1D17", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-300ghbk2-i_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "06A5AC4E-6AC5-4CF7-ADAC-4DD51ABF1F4D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-300ghbk2-i:-:*:*:*:*:*:*:*", matchCriteriaId: "8A85134B-286A-472B-B0D2-C4FE7F5B7FC8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-300ghbk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "17D60C3E-D822-4A09-B9EA-8FBA94DEEC0B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-300ghbk:-:*:*:*:*:*:*:*", matchCriteriaId: "4FD708BA-8E44-45C9-90A9-2CDA33CFA291", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-733febk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2FE17625-486F-40E4-9067-07139B69281D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-733febk:-:*:*:*:*:*:*:*", matchCriteriaId: "2152FA45-F61F-4347-B9B3-992C994D1B64", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-300febk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "CBA18046-201B-4009-BE58-B2457DCF206A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-300febk:-:*:*:*:*:*:*:*", matchCriteriaId: "8AD07548-B957-4275-BE59-F40940E078A7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-f300nf_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F6278262-98AD-4D51-B368-C8B7C47F4510", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-f300nf:-:*:*:*:*:*:*:*", matchCriteriaId: "DF251645-9505-49CC-BA4D-1CA454D639D1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300wh-h_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "C616FACD-FD5F-4CE3-A196-3447A0D8B5D4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300wh-h:-:*:*:*:*:*:*:*", matchCriteriaId: "079F2DC5-840A-4201-B46C-F9339968D256", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300bk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2FF22457-912C-4818-B31E-DCBDF60E6A19", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300bk:-:*:*:*:*:*:*:*", matchCriteriaId: "89ED96E9-D73D-42E7-A86F-7A73E00D2B86", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300wh_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2D59399A-BE39-4E30-BF0F-8EBADD179279", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300wh:-:*:*:*:*:*:*:*", matchCriteriaId: "E458D9A1-C2AF-4A8F-AC52-8A9D25C303ED", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300rd_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "58DFD59C-AAF4-4B14-A6D5-4CC8D436FDC2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300rd:-:*:*:*:*:*:*:*", matchCriteriaId: "5398598E-4579-44DF-95FB-EBB2871A248E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300sv_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B1E84D55-C80A-4813-AA15-2E67E1B849C3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300sv:-:*:*:*:*:*:*:*", matchCriteriaId: "6D4159F7-1DF3-4827-9784-E338CC3E7D93", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300bk-s_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "221C60DE-F1B0-4284-87DB-EE22B137B16E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300bk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "85EB981B-03EA-49B3-99EA-A8389F795C63", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300wh-s_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "814F1554-9070-4439-BDD0-379596B6710C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300wh-s:-:*:*:*:*:*:*:*", matchCriteriaId: "887859FA-3FA7-40E4-BE7B-977C66CF4E37", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300bk2-s_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1C8ABEA4-95AB-4B17-BA47-8FC17B62CB6E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300bk2-s:-:*:*:*:*:*:*:*", matchCriteriaId: "476D444E-3A59-4A46-975C-C33AC3F1BB7C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-300wh2-s_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "E429963F-D7D0-46A0-BD2D-98BD6A9F5348", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-300wh2-s:-:*:*:*:*:*:*:*", matchCriteriaId: "C383661F-19E5-4976-BAC2-1077B67D12A3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-h300bk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "641FC18A-D8A1-49BB-99D3-C4649B420686", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-h300bk:-:*:*:*:*:*:*:*", matchCriteriaId: "99341BF6-FD30-421A-9E9C-32C99B6F75AD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-h300wh_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F58AC396-DE39-4BD2-9E0E-46950312ABD0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-h300wh:-:*:*:*:*:*:*:*", matchCriteriaId: "A8C25CFC-393E-4487-965F-8F922723346F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-150bk_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B42DDDAA-92A9-4D41-9369-A163D6045B15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-150bk:-:*:*:*:*:*:*:*", matchCriteriaId: "2D11F66F-CEEA-42AB-B1E1-B569FB08B0F7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrh-150wh_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "378E5102-178F-4C8D-8C0B-CCCF9769A381", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrh-150wh:-:*:*:*:*:*:*:*", matchCriteriaId: "9E8082CE-18E8-438F-B953-D5EF1A27FE0B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:lan-w300n\\/rs_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "8AAF4C0E-F270-4062-925E-38C65F7280A4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:lan-w300n\\/rs:-:*:*:*:*:*:*:*", matchCriteriaId: "0032270C-53E3-4A46-95A8-FDE5DEFDC75C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:lan-w301nr_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "DE6896F9-6B59-4420-AB70-21B8B84C3B38", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:lan-w301nr:-:*:*:*:*:*:*:*", matchCriteriaId: "1A667CE5-0926-4986-B9F6-0F2C23F70FEF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:lan-w300n\\/p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "0376434A-D083-4F7C-9BB1-A9F58F86D3A3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:lan-w300n\\/p:-:*:*:*:*:*:*:*", matchCriteriaId: "BAD881BC-A228-4402-8A09-5E862B448A62", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:lan-wh300n\\/dgp_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "8F5C8E61-367D-40AE-B37D-F1CED982DAD2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:lan-wh300n\\/dgp:-:*:*:*:*:*:*:*", matchCriteriaId: "B27DECBE-877C-4888-A4B0-C0A65A590640", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:lan-wh300ndgpe_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B0870306-5179-4477-8C88-EDFC507ED3D9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:lan-wh300ndgpe:-:*:*:*:*:*:*:*", matchCriteriaId: "72FE6693-2075-4A08-9ACC-4564A36A16BA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.", }, { lang: "es", value: "Vulnerabilidad de fuerza de cifrado inadecuada en múltiples routers proporcionados por ELECOM CO.,LTD. y LOGITEC CORPORATION permite que un atacante no autenticado adyacente a la red adivine la clave de cifrado utilizada para la comunicación LAN inalámbrica e intercepte la comunicación. En cuanto a los productos/versiones afectados, consulte la información proporcionada por el proveedor en la sección [Referencias].", }, ], id: "CVE-2023-43757", lastModified: "2024-11-21T08:24:43.627", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2023-11-16T07:15:08.600", references: [ { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU94119876/", }, { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://www.elecom.co.jp/news/security/20210706-01/", }, { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://www.elecom.co.jp/news/security/20231114-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU94119876/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://www.elecom.co.jp/news/security/20210706-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://www.elecom.co.jp/news/security/20231114-01/", }, ], sourceIdentifier: "vultures@jpcert.or.jp", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-326", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2021-12-01 03:15
Modified
2024-11-21 05:47
Severity ?
Summary
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| vultures@jpcert.or.jp | https://jvn.jp/en/jp/JVN88993473/index.html | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20211130-01/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/jp/JVN88993473/index.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20211130-01/ | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| elecom | wrc-2533ghbk-i_firmware | * | |
| elecom | wrc-2533ghbk-i | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-2533ghbk-i_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BA6BC27D-D195-4E27-9C91-1B530F40B31F", versionEndIncluding: "1.20", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-2533ghbk-i:-:*:*:*:*:*:*:*", matchCriteriaId: "DDD11C2A-1EC2-420D-B2AE-FEB67E9866FF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", }, { lang: "es", value: "Una vulnerabilidad de tipo cross-site scripting en el router ELECOM LAN firmware WRC-2533GHBK-I versiones v1.20 y anteriores, permite a un atacante remoto autenticado inyectar un script arbitrario por medio de vectores no especificados", }, ], id: "CVE-2021-20857", lastModified: "2024-11-21T05:47:17.400", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "LOW", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 3.5, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:S/C:N/I:P/A:N", version: "2.0", }, exploitabilityScore: 6.8, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: true, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, exploitabilityScore: 2.3, impactScore: 2.7, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2021-12-01T03:15:06.940", references: [ { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, { source: "vultures@jpcert.or.jp", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20211130-01/", }, ], sourceIdentifier: "vultures@jpcert.or.jp", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-79", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2021-12-01 03:15
Modified
2024-11-21 05:47
Severity ?
Summary
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| vultures@jpcert.or.jp | https://jvn.jp/en/jp/JVN88993473/index.html | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20211130-01/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/jp/JVN88993473/index.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20211130-01/ | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| elecom | wrc-2533ghbk-i_firmware | * | |
| elecom | wrc-2533ghbk-i | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-2533ghbk-i_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BA6BC27D-D195-4E27-9C91-1B530F40B31F", versionEndIncluding: "1.20", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-2533ghbk-i:-:*:*:*:*:*:*:*", matchCriteriaId: "DDD11C2A-1EC2-420D-B2AE-FEB67E9866FF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", }, { lang: "es", value: "Una vulnerabilidad de cross-site scripting en el router ELECOM LAN firmware WRC-2533GHBK-I versiones v1.20 y anteriores, permite a un atacante remoto autenticado inyectar un script arbitrario por medio de vectores no especificados", }, ], id: "CVE-2021-20858", lastModified: "2024-11-21T05:47:17.500", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "LOW", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 3.5, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:S/C:N/I:P/A:N", version: "2.0", }, exploitabilityScore: 6.8, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: true, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, exploitabilityScore: 2.3, impactScore: 2.7, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2021-12-01T03:15:06.983", references: [ { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, { source: "vultures@jpcert.or.jp", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/jp/JVN88993473/index.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20211130-01/", }, ], sourceIdentifier: "vultures@jpcert.or.jp", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-79", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
var-202112-0008
Vulnerability from variot
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. elecom lan routers is a router of Japan Elecom
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-202112-0008", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "wrc-2533ghbk-i", scope: "lte", trust: 1, vendor: "elecom", version: "1.20", }, { model: "lan routers <=wrc-2533ghbk-i", scope: "eq", trust: 0.6, vendor: "elecom", version: "v1.20", }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95484", }, { db: "NVD", id: "CVE-2021-20858", }, ], }, cve: "CVE-2021-20858", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "SINGLE", author: "nvd@nist.gov", availabilityImpact: "NONE", baseScore: 3.5, confidentialityImpact: "NONE", exploitabilityScore: 6.8, id: "CVE-2021-20858", impactScore: 2.9, integrityImpact: "PARTIAL", severity: "LOW", trust: 1, vectorString: "AV:N/AC:M/Au:S/C:N/I:P/A:N", version: "2.0", }, { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "SINGLE", author: "CNVD", availabilityImpact: "NONE", baseScore: 3.5, confidentialityImpact: "NONE", exploitabilityScore: 6.8, id: "CNVD-2021-95484", impactScore: 2.9, integrityImpact: "PARTIAL", severity: "LOW", trust: 0.6, vectorString: "AV:N/AC:M/Au:S/C:N/I:P/A:N", version: "2.0", }, ], cvssV3: [ { attackComplexity: "LOW", attackVector: "NETWORK", author: "nvd@nist.gov", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", exploitabilityScore: 2.3, id: "CVE-2021-20858", impactScore: 2.7, integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", trust: 1, userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, ], severity: [ { author: "nvd@nist.gov", id: "CVE-2021-20858", trust: 1, value: "MEDIUM", }, { author: "CNVD", id: "CNVD-2021-95484", trust: 0.6, value: "LOW", }, { author: "CNNVD", id: "CNNVD-202111-2340", trust: 0.6, value: "MEDIUM", }, ], }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95484", }, { db: "CNNVD", id: "CNNVD-202111-2340", }, { db: "NVD", id: "CVE-2021-20858", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. elecom lan routers is a router of Japan Elecom", sources: [ { db: "NVD", id: "CVE-2021-20858", }, { db: "CNVD", id: "CNVD-2021-95484", }, ], trust: 1.44, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2021-20858", trust: 2.2, }, { db: "JVN", id: "JVN88993473", trust: 1.6, }, { db: "CNVD", id: "CNVD-2021-95484", trust: 0.6, }, { db: "CS-HELP", id: "SB2021113003", trust: 0.6, }, { db: "CNNVD", id: "CNNVD-202111-2340", trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95484", }, { db: "CNNVD", id: "CNNVD-202111-2340", }, { db: "NVD", id: "CVE-2021-20858", }, ], }, id: "VAR-202112-0008", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "CNVD", id: "CNVD-2021-95484", }, ], trust: 1.6, }, iot_taxonomy: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { category: [ "Network device", ], sub_category: null, trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95484", }, ], }, last_update_date: "2024-08-14T13:22:35.409000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "Patch for elecom lan routers cross-site scripting vulnerability (CNVD-2021-95484)", trust: 0.6, url: "https://www.cnvd.org.cn/patchInfo/show/303636", }, { title: "elecom lan Fixes for cross-site scripting vulnerabilities", trust: 0.6, url: "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=172521", }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95484", }, { db: "CNNVD", id: "CNNVD-202111-2340", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-79", trust: 1, }, ], sources: [ { db: "NVD", id: "CVE-2021-20858", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 2.2, url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { trust: 1.6, url: "https://jvn.jp/en/jp/jvn88993473/index.html", }, { trust: 0.6, url: "https://www.cybersecurity-help.cz/vdb/sb2021113003", }, { trust: 0.6, url: "https://nvd.nist.gov/vuln/detail/cve-2021-20858", }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95484", }, { db: "CNNVD", id: "CNNVD-202111-2340", }, { db: "NVD", id: "CVE-2021-20858", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "CNVD", id: "CNVD-2021-95484", }, { db: "CNNVD", id: "CNNVD-202111-2340", }, { db: "NVD", id: "CVE-2021-20858", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2021-12-09T00:00:00", db: "CNVD", id: "CNVD-2021-95484", }, { date: "2021-11-30T00:00:00", db: "CNNVD", id: "CNNVD-202111-2340", }, { date: "2021-12-01T03:15:06.983000", db: "NVD", id: "CVE-2021-20858", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2021-12-09T00:00:00", db: "CNVD", id: "CNVD-2021-95484", }, { date: "2021-12-08T00:00:00", db: "CNNVD", id: "CNNVD-202111-2340", }, { date: "2021-12-01T08:05:59.137000", db: "NVD", id: "CVE-2021-20858", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "remote", sources: [ { db: "CNNVD", id: "CNNVD-202111-2340", }, ], trust: 0.6, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "elecom lan routers cross-site scripting vulnerability (CNVD-2021-95484)", sources: [ { db: "CNVD", id: "CNVD-2021-95484", }, ], trust: 0.6, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "XSS", sources: [ { db: "CNNVD", id: "CNNVD-202111-2340", }, ], trust: 0.6, }, }
var-202112-0024
Vulnerability from variot
Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Elecom lan routers is a router of Japan Elecom
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-202112-0024", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "wrc-2533ghbk-i", scope: "lte", trust: 1, vendor: "elecom", version: "1.20", }, { model: "lan routers <=wrc-2533ghbk-i", scope: "eq", trust: 0.6, vendor: "elecom", version: "v1.20", }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95481", }, { db: "NVD", id: "CVE-2021-20857", }, ], }, cve: "CVE-2021-20857", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "SINGLE", author: "nvd@nist.gov", availabilityImpact: "NONE", baseScore: 3.5, confidentialityImpact: "NONE", exploitabilityScore: 6.8, id: "CVE-2021-20857", impactScore: 2.9, integrityImpact: "PARTIAL", severity: "LOW", trust: 1, vectorString: "AV:N/AC:M/Au:S/C:N/I:P/A:N", version: "2.0", }, { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "SINGLE", author: "CNVD", availabilityImpact: "NONE", baseScore: 3.5, confidentialityImpact: "NONE", exploitabilityScore: 6.8, id: "CNVD-2021-95481", impactScore: 2.9, integrityImpact: "PARTIAL", severity: "LOW", trust: 0.6, vectorString: "AV:N/AC:M/Au:S/C:N/I:P/A:N", version: "2.0", }, ], cvssV3: [ { attackComplexity: "LOW", attackVector: "NETWORK", author: "nvd@nist.gov", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", exploitabilityScore: 2.3, id: "CVE-2021-20857", impactScore: 2.7, integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", trust: 1, userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, ], severity: [ { author: "nvd@nist.gov", id: "CVE-2021-20857", trust: 1, value: "MEDIUM", }, { author: "CNVD", id: "CNVD-2021-95481", trust: 0.6, value: "LOW", }, { author: "CNNVD", id: "CNNVD-202111-2342", trust: 0.6, value: "MEDIUM", }, ], }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95481", }, { db: "CNNVD", id: "CNNVD-202111-2342", }, { db: "NVD", id: "CVE-2021-20857", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Elecom lan routers is a router of Japan Elecom", sources: [ { db: "NVD", id: "CVE-2021-20857", }, { db: "CNVD", id: "CNVD-2021-95481", }, ], trust: 1.44, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2021-20857", trust: 2.2, }, { db: "JVN", id: "JVN88993473", trust: 1.6, }, { db: "CNVD", id: "CNVD-2021-95481", trust: 0.6, }, { db: "CS-HELP", id: "SB2021113003", trust: 0.6, }, { db: "CNNVD", id: "CNNVD-202111-2342", trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95481", }, { db: "CNNVD", id: "CNNVD-202111-2342", }, { db: "NVD", id: "CVE-2021-20857", }, ], }, id: "VAR-202112-0024", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "CNVD", id: "CNVD-2021-95481", }, ], trust: 1.6, }, iot_taxonomy: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { category: [ "Network device", ], sub_category: null, trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95481", }, ], }, last_update_date: "2024-08-14T13:22:35.386000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "Patch for elecom lan routers cross-site scripting vulnerability (CNVD-2021-95481)", trust: 0.6, url: "https://www.cnvd.org.cn/patchInfo/show/303651", }, { title: "elecom lan Fixes for cross-site scripting vulnerabilities", trust: 0.6, url: "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=172265", }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95481", }, { db: "CNNVD", id: "CNNVD-202111-2342", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-79", trust: 1, }, ], sources: [ { db: "NVD", id: "CVE-2021-20857", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 2.2, url: "https://www.elecom.co.jp/news/security/20211130-01/", }, { trust: 1.6, url: "https://jvn.jp/en/jp/jvn88993473/index.html", }, { trust: 0.6, url: "https://www.cybersecurity-help.cz/vdb/sb2021113003", }, { trust: 0.6, url: "https://nvd.nist.gov/vuln/detail/cve-2021-20857", }, ], sources: [ { db: "CNVD", id: "CNVD-2021-95481", }, { db: "CNNVD", id: "CNNVD-202111-2342", }, { db: "NVD", id: "CVE-2021-20857", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "CNVD", id: "CNVD-2021-95481", }, { db: "CNNVD", id: "CNNVD-202111-2342", }, { db: "NVD", id: "CVE-2021-20857", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2021-12-09T00:00:00", db: "CNVD", id: "CNVD-2021-95481", }, { date: "2021-11-30T00:00:00", db: "CNNVD", id: "CNNVD-202111-2342", }, { date: "2021-12-01T03:15:06.940000", db: "NVD", id: "CVE-2021-20857", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2021-12-09T00:00:00", db: "CNVD", id: "CNVD-2021-95481", }, { date: "2021-12-08T00:00:00", db: "CNNVD", id: "CNNVD-202111-2342", }, { date: "2021-12-02T16:29:45.350000", db: "NVD", id: "CVE-2021-20857", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "remote", sources: [ { db: "CNNVD", id: "CNNVD-202111-2342", }, ], trust: 0.6, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "elecom lan routers cross-site scripting vulnerability (CNVD-2021-95481)", sources: [ { db: "CNVD", id: "CNVD-2021-95481", }, ], trust: 0.6, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "XSS", sources: [ { db: "CNNVD", id: "CNNVD-202111-2342", }, ], trust: 0.6, }, }