2024-12-08 03:06:42 +00:00

408 lines
11 KiB
JSON

{
"id": "CVE-2021-20739",
"sourceIdentifier": "vultures@jpcert.or.jp",
"published": "2021-07-07T08:15:07.813",
"lastModified": "2024-11-21T05:47:06.530",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors."
},
{
"lang": "es",
"value": "WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S y WRH-300WH-S, todas las versiones, permiten a un atacante no autenticado adyacente a la red ejecutar un comando arbitrario del sistema operativo por medio de vectores no especificados"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 5.8,
"accessVector": "ADJACENT_NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.5,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-300febk_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "634C6410-3AC8-4770-8D3F-AF12B39BCEB4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-300febk:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AD07548-B957-4275-BE59-F40940E078A7"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-f300nf_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6BE6FA33-6CC9-4AFC-B6EC-8BEE7BE7BAE7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-f300nf:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DF251645-9505-49CC-BA4D-1CA454D639D1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-733febk_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CCFD89BC-4736-4BEA-A1E5-42305D9E1B88"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-733febk:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2152FA45-F61F-4347-B9B3-992C994D1B64"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrh-300rd_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D1AA5CB5-25F3-4995-9254-8E0214B2DD4A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrh-300rd:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5398598E-4579-44DF-95FB-EBB2871A248E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrh-300bk_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5C184A52-C8E1-4604-9204-575282410CA1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrh-300bk:-:*:*:*:*:*:*:*",
"matchCriteriaId": "89ED96E9-D73D-42E7-A86F-7A73E00D2B86"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrh-300sv_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B6E69313-490A-4263-B01E-81E31C9AC805"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrh-300sv:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6D4159F7-1DF3-4827-9784-E338CC3E7D93"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrh-300wh_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7288F3AF-F903-4AD5-8680-EFCD23ACC333"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrh-300wh:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E458D9A1-C2AF-4A8F-AC52-8A9D25C303ED"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrh-h300wh_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1D857DD7-F3D3-4874-A9C5-3F8161381C1E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrh-h300wh:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A8C25CFC-393E-4487-965F-8F922723346F"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrh-h300bk_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1941F445-18F2-42E7-BF96-26B82FDC05BA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrh-h300bk:-:*:*:*:*:*:*:*",
"matchCriteriaId": "99341BF6-FD30-421A-9E9C-32C99B6F75AD"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrh-300bk-s_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C727AFD4-B712-4E7F-9AF6-7F5FC5CBC255"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrh-300bk-s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "85EB981B-03EA-49B3-99EA-A8389F795C63"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrh-300wh-s_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8A866C31-CA0D-4A25-B19B-70F2F8A7A91E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrh-300wh-s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "887859FA-3FA7-40E4-BE7B-977C66CF4E37"
}
]
}
]
}
],
"references": [
{
"url": "https://jvn.jp/en/vu/JVNVU94260088/index.html",
"source": "vultures@jpcert.or.jp",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.elecom.co.jp/news/security/20210706-01/",
"source": "vultures@jpcert.or.jp",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://jvn.jp/en/vu/JVNVU94260088/index.html",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.elecom.co.jp/news/security/20210706-01/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}