Skip to content
OpenAdvisories
Unscored CVE-2021-20712 EUVD-2021-8127GHSA-c7vp-4m6m-jg9v

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier…

Published Apr 26, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: NEC Product: NEC Aterm devices

Description

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function.

Affected products

VendorProductAffectedFixed
NEC NEC Aterm devices Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier —

References