Elecom Wrc-300febk-S Firmware
3 CVEs affecting Elecom Wrc-300febk-S Firmware. Latest disclosed: 2021-02-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20648 | Medium | 6.8 | 2021-02-12 | ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. |
CVE-2021-20647 | Medium | 6.5 | 2021-02-12 | Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an a… |
CVE-2021-20649 | Medium | 4.8 | 2021-02-12 | ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication respons… |