CVEvulnerability
CVE-2021-20677
3.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2021-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.1 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:N/A:P
Description
UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command.
Affected configurations
• necplatforms univerge aspire wx firmware (>= 1.00 <= 3.51)
• necplatforms univerge aspire ux firmware (>= 1.00 <= 9.70)
• necplatforms univerge sv9100 firmware (>= 1.00 <= 10.70)
• necplatforms sl2100 firmware (>= 1.00 <= 3.00)
References
- https://jvn.jp/en/jp/JVN12737530/index.html Third Party Advisory
- https://www.necplatforms.co.jp/en/press/security_adv.html Vendor Advisory
- https://jvn.jp/en/jp/JVN12737530/index.html Third Party Advisory
- https://www.necplatforms.co.jp/en/press/security_adv.html Vendor Advisory