Skip to content
OpenAdvisories
Unscored CVE-2021-20847 EUVD-2021-8257GHSA-5f3c-9rrr-9rp4

Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_…

Published Dec 1, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: NTT DOCOMO Product: Wi-Fi STATION SH-52A

Description

Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device.

Affected products

VendorProductAffectedFixed
NTT DOCOMO Wi-Fi STATION SH-52A 38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C —

References