PT-2021-14295
CVE-2021-20852
·
Published
2021-12-01
·
Updated
2021-12-02
Description by
CVSS 3.1
6.8
MediumMetricsAV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
ELECOM LAN routers versions 1.02.9 and prior
Description:
A buffer overflow issue allows a network-adjacent attacker with administrator privileges to execute arbitrary OS commands via unspecified vectors.
Recommendations:
For versions 1.02.9 and prior, update to a version later than 1.02.9 to resolve the issue. As a temporary workaround, consider restricting administrator access to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾