PT-2021-14306

CVE-2021-20863

·

Published

2021-12-01

·

Updated

2021-12-02

Description by

CVSS 3.1
8.0
High
MetricsAV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1167GST2 versions 1.25 and prior ELECOM WRC-1167GST2A versions 1.25 and prior ELECOM WRC-1167GST2H versions 1.25 and prior ELECOM WRC-2533GS2-B versions 1.52 and prior ELECOM WRC-2533GS2-W versions 1.52 and prior ELECOM WRC-1750GS versions 1.03 and prior ELECOM WRC-1750GSV versions 2.11 and prior ELECOM WRC-1900GST versions 1.03 and prior ELECOM WRC-2533GST versions 1.03 and prior ELECOM WRC-2533GSTA versions 1.03 and prior ELECOM WRC-2533GST2 versions 1.25 and prior ELECOM WRC-2533GST2SP versions 1.25 and prior ELECOM WRC-2533GST2-G versions 1.25 and prior ELECOM EDWRC-2533GST2 versions 1.25 and prior
Description: The issue allows a network-adjacent authenticated attacker to execute an arbitrary OS command with the root privilege via unspecified vectors.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾