CVE-2021-20621

CVE-2021-20621

EPSS 0.6%

Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

NEC Corporation · Aterm WG2600HP and Aterm WG2600HP2

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://jpn.nec.com/security-info/secinfo/nv21-005.html https://jvn.jp/en/jp/JVN38248512/index.html https://www.aterm.jp/support/tech/2019/0328.html