Cross-Site Scripting Vulnerability in NEC Aterm Devices
CVE-2021-20680
What is CVE-2021-20680?
A cross-site scripting vulnerability exists in NEC Aterm devices that allows remote attackers to inject arbitrary script or HTML. This vulnerability can be exploited via unspecified vectors, potentially compromising user data and system integrity. The following Aterm device firmware versions are affected, allowing attackers to exploit the vulnerability and manipulate user sessions or steal sensitive information.
Affected Version(s)
NEC Aterm devices Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier, Aterm WG1200HP3 firmware Ver.1.3.1 and earlier, Aterm WG1200HP2 firmware Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, Aterm WG1200HS firmware all versions Aterm WG1200HP firmware all versions Aterm WF800HP firmware all versions Aterm WF300HP2 firmware all versions Aterm WR8165N firmware all versions Aterm W500P firmware all versions, and Aterm W300P firmware all versions