Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
EC Q Series Q172DCPU-S1, MELSEC Q Series Q173DCPU-S1, MELSEC Q Series Q172DSCPU, MELSEC Q Series Q173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU, MELSEC Q Series Q170MSCPU-S1, MELSEC L Series L02CPU, MELSEC L Series L06CPU, MELSEC L Series L26CPU, MELSEC L Series L02CPU-P, MELSEC L Series L06CPU-P, MELSEC L Series L26CPU-P, MELSEC L Series L26CPU-BT, MELSEC L Series L26CPU-PBT, MELIPC Series MI5122-VW Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32
32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote un
SCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf - https://jvn.jp/vu/JVNVU94434051/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02
CVE ID: CVE-2021-20612 State: PUBLISHED Published: 2022-01-14T19:04:45 Last Updated: 2024-08-03T17:45:44.790Z Vendors: n/a Products: MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-ENET-P502 Problem Types: Lack of Administrator Control over Security Description: Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version 1.14 and prior and FX3U-ENET-P502 Firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in communication function of the product or other unspecified effects by sending specially crafted packets
S) condition in communication function of the product or other unspecified effects by sending specially crafted packets to an unnecessary opening of TCP port. Control by MELSEC-F series PLC is not affected by this vulnerability, but system reset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-023_en.pdf - https://jvn.jp/vu/JVNVU93268332/index.html - https://www.cisa.gov/uscert/ics/advisories/icsa-22-013-01
CVE ID: CVE-2021-20613 State: PUBLISHED Published: 2022-01-14T19:04:47 Last Updated: 2024-08-03T17:45:44.677Z Vendors: n/a Products: MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-ENET-P502 Problem Types: Improper Initialization Description: Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P502 Firmware version 1.16 and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in communication function of the product by sending specially crafted packets. Control by MELSEC-F series PLC is not affected by this vulnerability
f the product by sending specially crafted packets. Control by MELSEC-F series PLC is not affected by this vulnerability, but system reset is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/vu/JVNVU93268332/index.html - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-024_en.pdf - https://www.cisa.gov/uscert/ics/advisories/icsa-22-013-07
CVE ID: CVE-2021-20616 State: PUBLISHED Published: 2021-01-13T09:40:37 Last Updated: 2024-08-03T17:45:44.726Z Vendors: Sky Co., LTD. Products: SKYSEA Client View Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.skyseaclientview.net/news/210112_01/ - https://jvn.jp/en/jp/JVN69635538/index.html
CVE ID: CVE-2021-20617 State: PUBLISHED Published: 2021-01-14T08:20:16 Last Updated: 2024-08-03T17:45:44.798Z Vendors: Seeds Co.,Ltd. Products: acmailer and acmailer DB Problem Types: Improper access control Description: Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.acmailer.jp/info/de.cgi?id=101 - https://jvn.jp/en/jp/JVN35906450/index.html
CVE ID: CVE-2021-20618 State: PUBLISHED Published: 2021-01-14T08:20:17 Last Updated: 2024-08-03T17:45:44.743Z Vendors: Seeds Co.,Ltd. Products: acmailer and acmailer DB Problem Types: Privilege chaining Description: Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.acmailer.jp/info/de.cgi?id=101 - https://jvn.jp/en/jp/JVN35906450/index.html
CVE ID: CVE-2021-20619 State: PUBLISHED Published: 2021-01-19T04:55:16 Last Updated: 2024-08-03T17:45:44.833Z Vendors: WESEEK, Inc. Products: GROWI v4.2 Series Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/weseek/growi - https://weseek.co.jp/security/2021/01/18/vulnerability/growi-prevent-xss4/ - https://jvn.jp/en/jp/JVN57544707/index.html
CVE ID: CVE-2021-20620 State: PUBLISHED Published: 2021-01-28T10:00:28 Last Updated: 2024-08-03T17:45:44.757Z Vendors: NEC Corporation Products: Aterm WF800HP Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.aterm.jp/support/tech/2019/0328.html - https://jpn.nec.com/security-info/secinfo/nv21-005.html - https://jvn.jp/en/jp/JVN38248512/index.html
CVE ID: CVE-2021-20621 State: PUBLISHED Published: 2021-01-28T10:00:29 Last Updated: 2024-08-03T17:45:44.833Z Vendors: NEC Corporation Products: Aterm WG2600HP and Aterm WG2600HP2 Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.aterm.jp/support/tech/2019/0328.html - https://jpn.nec.com/security-info/secinfo/nv21-005.html - https://jvn.jp/en/jp/JVN38248512/index.html
CVE ID: CVE-2021-20622 State: PUBLISHED Published: 2021-01-28T10:00:29 Last Updated: 2024-08-03T17:45:44.887Z Vendors: NEC Corporation Products: Aterm WG2600HP and Aterm WG2600HP2 Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.aterm.jp/support/tech/2019/0328.html - https://jpn.nec.com/security-info/secinfo/nv21-005.html - https://jvn.jp/en/jp/JVN38248512/index.html
CVE ID: CVE-2021-20623 State: PUBLISHED Published: 2021-02-05T09:35:23 Last Updated: 2024-08-03T17:45:44.723Z Vendors: Panasonic Corporation Products: Video Insight VMS Problem Types: Remote code execution Description: Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://downloadvi.com/downloads/IPServer/v7.8/780182/v780182RN.pdf - https://jvn.jp/en/jp/JVN42252698/index.html
CVE ID: CVE-2021-20624 State: PUBLISHED Published: 2021-03-18T00:55:56 Last Updated: 2024-08-03T17:45:44.737Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/36866/ - https://jvn.jp/en/jp/JVN45797538/index.html
CVE ID: CVE-2021-20625 State: PUBLISHED Published: 2021-03-18T00:55:57 Last Updated: 2024-08-03T17:45:44.832Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36874/
CVE ID: CVE-2021-20626 State: PUBLISHED Published: 2021-03-18T00:55:57 Last Updated: 2024-08-03T17:45:45.280Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and alter the data of Workflow via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36864/
CVE ID: CVE-2021-20627 State: PUBLISHED Published: 2021-03-18T00:55:58 Last Updated: 2024-08-03T17:45:45.334Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36873/
CVE ID: CVE-2021-20628 State: PUBLISHED Published: 2021-03-18T00:55:59 Last Updated: 2024-08-03T17:45:45.027Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36868/
CVE ID: CVE-2021-20629 State: PUBLISHED Published: 2021-03-18T00:56:00 Last Updated: 2024-08-03T17:45:45.027Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36867/
CVE ID: CVE-2021-20630 State: PUBLISHED Published: 2021-03-18T00:56:00 Last Updated: 2024-08-03T17:45:44.995Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36872/
CVE ID: CVE-2021-20631 State: PUBLISHED Published: 2021-03-18T00:56:01 Last Updated: 2024-08-03T17:45:44.986Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Input Validation Description: Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of Custom App via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36871/
CVE ID: CVE-2021-20632 State: PUBLISHED Published: 2021-03-18T00:56:02 Last Updated: 2024-08-03T17:45:45.234Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Bulletin Board via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36870/
CVE ID: CVE-2021-20633 State: PUBLISHED Published: 2021-03-18T00:56:02 Last Updated: 2024-08-03T17:45:45.214Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Cabinet via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36869/
CVE ID: CVE-2021-20634 State: PUBLISHED Published: 2021-03-18T00:56:03 Last Updated: 2024-08-03T17:45:45.208Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Access Control Description: Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Custom App via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45797538/index.html - https://kb.cybozu.support/article/36865/
CVE ID: CVE-2021-20635 State: PUBLISHED Published: 2021-02-12T06:15:41 Last Updated: 2024-08-03T17:45:45.340Z Vendors: LOGITEC CORPORATION Products: LAN-WH450N/GR Problem Types: Improper restriction of excessive authentication attempts Description: Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN96783542/index.html
CVE ID: CVE-2021-20636 State: PUBLISHED Published: 2021-02-12T06:15:41 Last Updated: 2024-08-03T17:45:44.951Z Vendors: LOGITEC CORPORATION Products: LAN-W300N/PR5B Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN96783542/index.html
CVE ID: CVE-2021-20637 State: PUBLISHED Published: 2021-02-12T06:15:42 Last Updated: 2024-08-03T17:45:45.214Z Vendors: LOGITEC CORPORATION Products: LAN-W300N/PR5B Problem Types: Improper check or handling of exceptional conditions Description: Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN96783542/index.html
CVE ID: CVE-2021-20638 State: PUBLISHED Published: 2021-02-12T06:15:43 Last Updated: 2024-08-03T17:45:45.252Z Vendors: LOGITEC CORPORATION Products: LAN-W300N/PGRB Problem Types: OS Command Injection Description: LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN96783542/index.html
CVE ID: CVE-2021-20639 State: PUBLISHED Published: 2021-02-12T06:15:43 Last Updated: 2024-08-03T17:45:44.960Z Vendors: LOGITEC CORPORATION Products: LAN-W300N/PGRB Problem Types: OS Command Injection Description: LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN96783542/index.html
CVE ID: CVE-2021-20640 State: PUBLISHED Published: 2021-02-12T06:15:44 Last Updated: 2024-08-03T17:45:45.034Z Vendors: LOGITEC CORPORATION Products: LAN-W300N/PGRB Problem Types: Buffer Overflow Description: Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN96783542/index.html - https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2021-20641 State: PUBLISHED Published: 2021-02-12T06:15:45 Last Updated: 2024-08-03T17:45:44.987Z Vendors: LOGITEC CORPORATION Products: LAN-W300N/RS Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN96783542/index.html
CVE ID: CVE-2021-20642 State: PUBLISHED Published: 2021-02-12T06:15:45 Last Updated: 2024-08-03T17:45:45.349Z Vendors: LOGITEC CORPORATION Products: LAN-W300N/RS Problem Types: Improper check or handling of exceptional conditions Description: Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN96783542/index.html
CVE ID: CVE-2021-20643 State: PUBLISHED Published: 2021-02-12T06:15:46 Last Updated: 2024-08-03T17:45:45.126Z Vendors: ELECOM CO.,LTD. Products: LD-PS/U1 Problem Types: Improper Access Control Description: Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN47580234/index.html
CVE ID: CVE-2021-20644 State: PUBLISHED Published: 2021-02-12T06:15:47 Last Updated: 2024-08-03T17:45:45.343Z Vendors: ELECOM CO.,LTD. Products: WRC-1467GHBK-A Problem Types: Script injection Description: ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN47580234/index.html
CVE ID: CVE-2021-20645 State: PUBLISHED Published: 2021-02-12T06:15:48 Last Updated: 2024-08-03T17:45:44.968Z Vendors: ELECOM CO.,LTD. Products: WRC-300FEBK-A Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN47580234/index.html
CVE ID: CVE-2021-20646 State: PUBLISHED Published: 2021-02-12T06:15:48 Last Updated: 2024-08-03T17:45:45.325Z Vendors: ELECOM CO.,LTD. Products: WRC-300FEBK-A Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN47580234/index.html
CVE ID: CVE-2021-20647 State: PUBLISHED Published: 2021-02-12T06:15:49 Last Updated: 2024-08-03T17:45:45.337Z Vendors: ELECOM CO.,LTD. Products: WRC-300FEBK-S Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN47580234/index.html
CVE ID: CVE-2021-20648 State: PUBLISHED Published: 2021-02-12T06:15:50 Last Updated: 2024-08-03T17:45:44.997Z Vendors: ELECOM CO.,LTD. Products: WRC-300FEBK-S Problem Types: OS Command Injection Description: ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN47580234/index.html
CVE ID: CVE-2021-20649 State: PUBLISHED Published: 2021-02-12T06:15:50 Last Updated: 2024-08-03T17:45:45.385Z Vendors: ELECOM CO.,LTD. Products: WRC-300FEBK-S Problem Types: Improper certificate validation Description: ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication response. As a result, an arbitrary OS command may be executed on the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN47580234/index.html