CVE-2021-20649

CVE-2021-20649: vulnerability in ELECOM CO.,LTD. WRC-300FEBK-S

Published · Updated

Follow this CVE+ Monitor WRC-300FEBK-S

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication response. As a result, an arbitrary OS command may be executed on the affected device.
Affected products
ELECOM CO.,LTD. · WRC-300FEBK-S
Related CVEs — ELECOM CO.,LTD. WRC-300FEBK-S

In the same product, most dangerous first.

CVE-2021-20647—CVE-2021-20647EPSS 0.5%CVE-2021-20648—CVE-2021-20648EPSS 0.5%