Vulnerability in Necplatforms Sl2100
CVE-2021-20677
UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L.
EPSS exploit prediction
EPSS: 0.009 (58.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 59th percentile — 58.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000
Affected products
- Necplatforms Sl2100
- Necplatforms Sl2100 Firmware
- Necplatforms Univerge Aspire Ux
- Necplatforms Univerge Aspire Ux Firmware
- Necplatforms Univerge Aspire Wx
- Necplatforms Univerge Aspire Wx Firmware
- Necplatforms Univerge Sv9100
- Necplatforms Univerge Sv9100 Firmware
- Nec Platforms, Ltd. Univerge Aspire Series Pbx — versions UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00
References
- www.necplatforms.co.jp/en/press/security_adv.html (Vendor Advisory)
- jvn.jp/en/jp/JVN12737530/index.html (Third Party Advisory)
Frequently asked questions
- What is CVE-2021-20677?
- CVE-2021-20677 is a low-severity vulnerability in Necplatforms Sl2100. CVSS score: 3.1/10. Published 2021-03-26.
- How severe is CVE-2021-20677?
- Low severity. CVSS v3 base score is 3.1 out of 10.