CVE-2021-20649
CVE-2021-20649
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Feb 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication response. As a result, an arbitrary OS command may be executed on the affected device.
Affected products
ELECOM CO.,LTD. · WRC-300FEBK-SWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →