VULNERABILITY INTELLIGENCE

CVE-2021-47820

CVSS score5.3 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-01-16
Last modified2026-06-17

Description

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent.

Primary references