CVEvulnerability
CVE-2021-20621
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-01-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Affected configurations
• aterm wg2600hp firmware (<= 1.0.2)
• aterm wg2600hp2 firmware (<= 1.0.2)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://jpn.nec.com/security-info/secinfo/nv21-005.html Third Party Advisory
- https://jvn.jp/en/jp/JVN38248512/index.html Third Party Advisory
- https://www.aterm.jp/support/tech/2019/0328.html Patch, Vendor Advisory
- https://jpn.nec.com/security-info/secinfo/nv21-005.html Third Party Advisory
- https://jvn.jp/en/jp/JVN38248512/index.html Third Party Advisory
- https://www.aterm.jp/support/tech/2019/0328.html Patch, Vendor Advisory