Medium severity · published Apr 26, 2021
CVE-2021-20680
Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware…
6.1
CVSS
0.8%
EPSS
No
On KEV
Description
Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier, Aterm WG1200HP3 firmware Ver.1.3.1 and earlier, Aterm WG1200HP2 firmware Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, Aterm WG1200HS firmware all versions Aterm WG1200HP firmware all versions Aterm WF800HP firmware all versions Aterm WF300HP2 firmware all versions Aterm WR8165N firmware all versions Aterm W500P firmware all versions, and Aterm W300P firmware all versions) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
Aterm W1200ex Firmware · Nec
through 1.3.1 · source: NVD
AW
Aterm W1200ex-ms Firmware · Nec
through 1.3.1 · source: NVD
AW
Aterm W300p Firmware · Nec
All versions, or not specified · source: NVD
AW
Aterm W500p Firmware · Nec
All versions, or not specified · source: NVD
AW
Aterm Wf300hp2 Firmware · Nec
All versions, or not specified · source: NVD
AW
Aterm Wf800hp Firmware · Nec
All versions, or not specified · source: NVD
AW
Aterm Wg1200hp Firmware · Nec
All versions, or not specified · source: NVD
AW
Aterm Wg1200hp2 Firmware · Nec
through 2.5.0 · source: NVD
AW
Aterm Wg1200hp3 Firmware · Nec
through 1.3.1 · source: NVD
AW
Aterm Wg1200hs Firmware · Nec
All versions, or not specified · source: NVD
AW
Aterm Wg1200hs2 Firmware · Nec
through 2.5.0 · source: NVD
AW
Aterm Wg1200hs3 Firmware · Nec
through 1.1.2 · source: NVD