5.3

CVE-2021-20712

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nec ≫ Aterm Wg2600hs Firmware Version <= 1.5.1
   Nec ≫ Aterm Wg2600hs Version -
Nec ≫ Aterm Wx3000hp Firmware Version <= 1.1.2
   Nec ≫ Aterm Wx3000hp Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.8% 0.518
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://jpn.nec.com/security-info/secinfo/nv21-010.html
Vendor Advisory
Mitigation
https://jvn.jp/en/jp/JVN29739718/index.html
Third Party Advisory