Cross-Site Request Forgery Vulnerability in Aterm Routers by NEC
CVE-2021-20621
8.8HIGH
What is CVE-2021-20621?
A cross-site request forgery (CSRF) vulnerability exists in the firmware of Aterm WG2600HP and Aterm WG2600HP2 routers. This flaw allows remote attackers to potentially hijack an administrator's authentication, which could enable them to execute unauthorized actions in the context of the administrator's session. Attackers can exploit this vulnerability via unspecified methods, compromising the security of affected devices.
Affected Version(s)
Aterm WG2600HP and Aterm WG2600HP2 Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier