VULNERABILITY INTELLIGENCE

CVE-2021-20709

CVSS score7.2 HIGH

EPSS probability0.66%

CISA KEVNot currently listed

Published2021-04-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to a specific URL.

Weakness classification

nvd@nist.gov: CWE-354

Primary references

vultures@jpcert.or.jp — Mitigation, Vendor Advisory
vultures@jpcert.or.jp — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory