CVE-2021-20709
Assigner: jpcert
Published: 2021-04-26T00:20:44
State: PUBLISHED
affected: product: NEC Aterm devices
vendor: NEC Corporation
versions: status: affected
version: Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier
descriptions: value: Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to a specific URL.
problemTypes: descriptions: description: Improper Validation of Integrity Check Value
type: text