rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-20592 
Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT SoftGOT2000 versions 1.170C through 1.256S allows a remote unauthenticated attacker to cause DoS condition on the MODBUS/TCP slave communication function of the products by rapidly and repeatedly connecting and disconnecting to and from the MODBUS/TCP communication port on a target. Restart or reset is required to recover.
Problem types: description: Missing synchronization
Affected products: vendor: n/a
product: GOT2000 series GT27 model; GT25 model; GT23 model; GT SoftGOT2000
Published: 2021-08-05T20:46:50.000Z
CVE-2021-20593 
Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and prior, EB-50GU-A Ver 7.09 and prior, EB-50GU-J Ver 7.09 and prior, AE-200A Ver 7.93 and prior, AE-200E Ver 7.93 and prior, AE-50A Ver 7.93 and prior, AE-50E Ver 7.93 and prior, EW-50A Ver 7.93 and prior, EW-50E Ver 7.93 and prior, TE-200A Ver 7.93 and prior, TE-50A Ver 7.93 and prior, TW-50A Ver 7.93 and prior, CMS-RMD-J Ver.1.30 and prior) and Air Conditioning System/Expansion Controllers (PAC-YG50ECA Ver.2.20 and prior) allows a remote authenticated attacker to impersonate administrators to disclose configuration information of the air conditioning system and tamper information (e.g. operation information and configuration of air conditioning system) by exploiting this vulnerability.
Problem types: description: Incorrect Implementation of Authentication Algorithm
Affected products: vendor: n/a
product: Air Conditioning System/Centralized Controllers G-50A; GB-50A; AG-150A-A; AG-150A-J; GB-50ADA-A; GB-50ADA-J; EB-50GU-A; EB-50GU-J; AE-200A; AE-200E; AE-50A; AE-50E; EW-50A; EW-50E; TE-200A; TE-50A; TW-50A; CMS-RMD-J; Air Conditioning System/Expansion Controllers PAC-YG50ECA
Published: 2021-07-13T13:30:59.000Z
CVE-2021-20594 
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to acquire legitimate user names registered in the module via brute-force attack on user names.
Problem types: description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU
default_status: unaffected
Published: 2021-08-06T00:00:00.000Z
CVE-2021-20595 
Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and prior, EB-50GU-A Ver 7.09 and prior, EB-50GU-J Ver 7.09 and prior, AE-200A Ver 7.93 and prior, AE-200E Ver 7.93 and prior, AE-50A Ver 7.93 and prior, AE-50E Ver 7.93 and prior, EW-50A Ver 7.93 and prior, EW-50E Ver 7.93 and prior, TE-200A Ver 7.93 and prior, TE-50A Ver 7.93 and prior, TW-50A Ver 7.93 and prior, CMS-RMD-J Ver.1.30 and prior), Air Conditioning System/Expansion Controllers (PAC-YG50ECA Ver.2.20 and prior) and Air Conditioning System/BM adapter(BAC-HD150 Ver.2.21 and prior) allows a remote unauthenticated attacker to disclose some of data in the air conditioning system or cause a DoS condition by sending specially crafted packets.
Problem types: description: Improper Restriction of XML External Entity Reference
Affected products: vendor: n/a
product: Air Conditioning System/Centralized Controllers G-50A; GB-50A; GB-24A; AG-150A-A; AG-150A-J; GB-50ADA-A; GB-50ADA-J; EB-50GU-A; EB-50GU-J; AE-200A; AE-200E; AE-50A; AE-50E; EW-50A; EW-50E; TE-200A; TE-50A; TW-50A; CMS-RMD-J; Air Conditioning System/Expansion Controllers PAC-YG50ECA; Air Conditioning System/BM adapter BAC-HD150
Published: 2021-07-13T10:54:01.000Z
CVE-2021-20596 
NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.
Problem types: description: NULL Pointer Dereference
Affected products: vendor: n/a
product: MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502
Published: 2021-07-22T11:02:56.000Z
CVE-2021-20597 
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to the target unauthorizedly by sniffing network traffic and obtaining credentials when registering user information in the target or changing a password.
Problem types: description: Insufficiently Protected Credentials
Affected products: vendor: n/a
product: Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU; Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU
default_status: unaffected
Published: 2021-08-06T00:00:00.000Z
CVE-2021-20598 
Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect password.
Problem types: description: Overly Restrictive Account Lockout Mechanism
Affected products: vendor: n/a
product: MELSEC iQ-R series CPU modules R08/16/32/120SFCPU; R08/16/32/120PSFCPU
Published: 2021-08-06T16:53:47.000Z
CVE-2021-20599 
Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password.
Problem types: cwe_id: CWE-319
description: CWE-319 Cleartext Transmission of Sensitive Information
Affected products: vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series Safety CPU R08SFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R series Safety CPU R16SFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R series Safety CPU R32SFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R series Safety CPU R120SFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R series SIL2 Process CPU R16PSFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R series SIL2 Process CPU R32PSFCPU
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R series SIL2 Process CPU R120PSFCPU
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Published: 2021-10-14T00:00:00.000Z
CVE-2021-20600 
Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending a large number of packets in a short time while the module starting up. System reset is required for recovery.
Problem types: description: Uncontrolled Resource Consumption
Affected products: vendor: n/a
product: Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V
Published: 2021-10-08T16:42:10.000Z
CVE-2021-20601 
Improper input validation vulnerability in GOT2000 series GT27 model all versions, GOT2000 series GT25 model all versions, GOT2000 series GT23 model all versions, GOT2000 series GT21 model all versions, GOT SIMPLE series GS21 model all versions, and GT SoftGOT2000 all versions allows an remote unauthenticated attacker to write a value that exceeds the configured input range limit by sending a malicious packet to rewrite the device value. As a result, the system operation may be affected, such as malfunction.
Problem types: description: Improper Input Validation
Affected products: vendor: n/a
product: GOT2000 series GT27 model; GOT2000 series GT25 model; GOT2000 series GT23 model; GOT2000 series GT21 model; GOT SIMPLE series GS21 model; GT SoftGOT2000
Published: 2021-11-23T14:42:53.000Z
CVE-2021-20606 
Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open malicious project file specially crafted by an attacker.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT Navigator; Mitsubishi Electric EZSocket
Published: 2021-12-17T16:10:27.000Z
CVE-2021-20607 
Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open malicious project file specially crafted by an attacker.
Problem types: description: Integer Underflow
Affected products: vendor: n/a
product: Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT Navigator; Mitsubishi Electric EZSocket
Published: 2021-12-17T16:10:28.000Z
CVE-2021-20608 
Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthenticated attacker to cause a DoS condition in GX Works2 by getting GX Works2 to read a tampered program file from a Mitsubishi Electric PLC by sending malicious crafted packets to tamper with the program file.
Problem types: description: Improper Handling of Length Parameter Inconsistency
Affected products: vendor: n/a
product: GX Works2
Published: 2021-12-17T16:10:27.000Z
CVE-2021-20612 
Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, FX3U-ENET-L Firmware version 1.14 and prior and FX3U-ENET-P502 Firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in communication function of the product or other unspecified effects by sending specially crafted packets to an unnecessary opening of TCP port. Control by MELSEC-F series PLC is not affected by this vulnerability, but system reset is required for recovery.
Problem types: description: Lack of Administrator Control over Security
Affected products: vendor: n/a
product: MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-ENET-P502
Published: 2022-01-14T19:04:45.000Z
CVE-2021-20613 
Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P502 Firmware version 1.16 and prior allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in communication function of the product by sending specially crafted packets. Control by MELSEC-F series PLC is not affected by this vulnerability, but system reset is required for recovery.
Problem types: description: Improper Initialization
Affected products: vendor: n/a
product: MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-ENET-P502
Published: 2022-01-14T19:04:47.000Z
CVE-2021-20616 
Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sky Co., LTD.
product: SKYSEA Client View
Published: 2021-01-13T09:40:37.000Z
CVE-2021-20617 
Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.
Problem types: description: Improper access control
Affected products: vendor: Seeds Co.,Ltd.
product: acmailer and acmailer DB
Published: 2021-01-14T08:20:16.000Z
CVE-2021-20618 
Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.
Problem types: description: Privilege chaining
Affected products: vendor: Seeds Co.,Ltd.
product: acmailer and acmailer DB
Published: 2021-01-14T08:20:17.000Z
CVE-2021-20619 
Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: WESEEK, Inc.
product: GROWI v4.2 Series
Published: 2021-01-19T04:55:16.000Z
CVE-2021-20620 
Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: NEC Corporation
product: Aterm WF800HP
Published: 2021-01-28T10:00:28.000Z
CVE-2021-20621 
Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: NEC Corporation
product: Aterm WG2600HP and Aterm WG2600HP2
Published: 2021-01-28T10:00:29.000Z
CVE-2021-20622 
Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: NEC Corporation
product: Aterm WG2600HP and Aterm WG2600HP2
Published: 2021-01-28T10:00:29.000Z
CVE-2021-20623 
Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a specially crafted request.
Problem types: description: Remote code execution
Affected products: vendor: Panasonic Corporation
product: Video Insight VMS
Published: 2021-02-05T09:35:23.000Z
CVE-2021-20624 
Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:55:56.000Z
CVE-2021-20625 
Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:55:57.000Z
CVE-2021-20626 
Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and alter the data of Workflow via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:55:57.000Z
CVE-2021-20627 
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:55:58.000Z
CVE-2021-20628 
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:55:59.000Z
CVE-2021-20629 
Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:56:00.000Z
CVE-2021-20630 
Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:56:00.000Z
CVE-2021-20631 
Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of Custom App via unspecified vectors.
Problem types: description: Improper Input Validation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:56:01.000Z
CVE-2021-20632 
Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Bulletin Board via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:56:02.000Z
CVE-2021-20633 
Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Cabinet via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:56:02.000Z
CVE-2021-20634 
Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Custom App via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2021-03-18T00:56:03.000Z
CVE-2021-20635 
Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network.
Problem types: description: Improper restriction of excessive authentication attempts
Affected products: vendor: LOGITEC CORPORATION
product: LAN-WH450N/GR
Published: 2021-02-12T06:15:41.000Z
CVE-2021-20636 
Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted.
Problem types: description: Cross-site request forgery
Affected products: vendor: LOGITEC CORPORATION
product: LAN-W300N/PR5B
Published: 2021-02-12T06:15:41.000Z
CVE-2021-20637 
Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL.
Problem types: description: Improper check or handling of exceptional conditions
Affected products: vendor: LOGITEC CORPORATION
product: LAN-W300N/PR5B
Published: 2021-02-12T06:15:42.000Z
CVE-2021-20638 
LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: LOGITEC CORPORATION
product: LAN-W300N/PGRB
Published: 2021-02-12T06:15:43.000Z
CVE-2021-20639 
LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: LOGITEC CORPORATION
product: LAN-W300N/PGRB
Published: 2021-02-12T06:15:43.000Z
CVE-2021-20640 
Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: LOGITEC CORPORATION
product: LAN-W300N/PGRB
Published: 2021-02-12T06:15:44.000Z
CVE-2021-20641 
Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted.
Problem types: description: Cross-site request forgery
Affected products: vendor: LOGITEC CORPORATION
product: LAN-W300N/RS
Published: 2021-02-12T06:15:45.000Z
CVE-2021-20642 
Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL.
Problem types: description: Improper check or handling of exceptional conditions
Affected products: vendor: LOGITEC CORPORATION
product: LAN-W300N/RS
Published: 2021-02-12T06:15:45.000Z
CVE-2021-20643 
Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a specially crafted request.
Problem types: description: Improper Access Control
Affected products: vendor: ELECOM CO.,LTD.
product: LD-PS/U1
Published: 2021-02-12T06:15:46.000Z
CVE-2021-20644 
ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page.
Problem types: description: Script injection
Affected products: vendor: ELECOM CO.,LTD.
product: WRC-1467GHBK-A
Published: 2021-02-12T06:15:47.000Z
CVE-2021-20645 
Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: ELECOM CO.,LTD.
product: WRC-300FEBK-A
Published: 2021-02-12T06:15:48.000Z