Vulnerability in Necplatforms Sl2100
CVE-2021-20677
UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command.
EPSS: 0.009 (56.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Necplatforms Sl2100
- Necplatforms Sl2100_firmware
- Necplatforms Univerge_aspire_ux
- Necplatforms Univerge_aspire_ux_firmware
- Necplatforms Univerge_aspire_wx
- Necplatforms Univerge_aspire_wx_firmware
- Necplatforms Univerge_sv9100
- Necplatforms Univerge_sv9100_firmware
- Nec Platforms, Ltd. Univerge Aspire Series Pbx — versions UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00
References
- vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
- vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-20677?
- CVE-2021-20677 is a low-severity vulnerability in Necplatforms Sl2100. CVSS score: 3.1/10. Published 2021-03-26.
- How severe is CVE-2021-20677?
- Low severity. CVSS v3 base score is 3.1 out of 10.