What is CVE-2021-20121?

CVE-2021-20121 is a medium-severity vulnerability in Telus Prv65b444a-S-Ts. CVSS score: 4.0/10. Published 2021-10-11.

How severe is CVE-2021-20121?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Vulnerability in Telus Prv65b444a-S-Ts

CVE-2021-20121

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and making a series of crafted requests to the device's web interface.

EPSS: 0.005 (40.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Telus Prv65b444a-s-ts
Telus Prv65b444a-s-ts_firmware — versions 3.00.20
N/a Telus Wi-fi Hub (Prv65b444a-s-ts) — versions 3.00.20

References

vulnreport@tenable.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-20121?: CVE-2021-20121 is a medium-severity vulnerability in Telus Prv65b444a-S-Ts. CVSS score: 4.0/10. Published 2021-10-11.
How severe is CVE-2021-20121?: Medium severity. CVSS v3 base score is 4.0 out of 10.