Unscored CVE-2021-20620 EUVD-2021-8038GHSA-mhmg-wv9c-8hpm

Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via…

Published Jan 28, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
NEC	Aterm WF800HP	Aterm WF800HP firmware Ver1.0.9 and earlier	—

References

https://www.aterm.jp/support/tech/2019/0328.html
https://jpn.nec.com/security-info/secinfo/nv21-005.html
https://jvn.jp/en/jp/JVN38248512/index.html