Unscored CVE-2021-20858 EUVD-2021-8267GHSA-5q7q-7mx2-p7hf

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to i…

Published Dec 1, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: ELECOM Product: ELECOM LAN router

Description

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
ELECOM	ELECOM LAN router	WRC-2533GHBK-I firmware v1.20 and prior	—

References

https://www.elecom.co.jp/news/security/20211130-01/
https://jvn.jp/en/jp/JVN88993473/index.html