CVE Feed

    Dashboard / CVE / CVE-2021-20712

    CVE-2021-20712

    Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function.

    Published:Apr 26, 2021
    Last Modified:Nov 21, 2024
    EPS:Apr 26, 2021
    EPSS Score:0.0025
    CVSS Score:5.3

    Affected Products

    Vendor
    Nec
    Product
    Aterm Wg2600hs
    Vendor
    Nec
    Product
    Aterm Wg2600hs Firmware
    Vendor
    Nec
    Product
    Aterm Wx3000hp
    Vendor
    Nec
    Product
    Aterm Wx3000hp Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-4622 (CVSS 7.1) — OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary …
    CVE-2026-4621 (CVSS 6.3) — Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via …
    CVE-2026-4309 (CVSS 6.3) — Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific de…
    CVE-2021-20711 (CVSS 9.8) — Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecifi…
    CVE-2021-20708 (CVSS 7.2) — NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier,…
    CVE-2021-20709 (CVSS 7.2) — Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier…
    CVE-2020-5533 (CVSS 6.1) — Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to …
    CVE-2020-5534 (CVSS 8) — Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to e…
    CVE-2020-5525 (CVSS 8) — Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm…
    CVE-2020-5524 (CVSS 8.8) — Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High