Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Aterm Component: Wg2600hp2 Firmware Clear all filters
TI-2021-03849 CVE-2021-20622 · GHSA-2mx9-p3v6-mw46

Cross-site scripting in NEC Corporation Aterm WG2600HP and Aterm WG2600HP2

Priority LOW 29

Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01057 Published 2021-01-28 No fix listed CWE-79
TI-2021-03848 CVE-2021-20621 · GHSA-6r2v-76j8-x9vv

Cross-site request forgery in NEC Corporation Aterm WG2600HP and Aterm WG2600HP2

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators vi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00653 Published 2021-01-28 No fix listed CWE-352