CVE-2021-20847

Published: Dec 1, 2021Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device.

Affected (9)

Products: Nttdocomo: Wi Fi Station Sh 52a Firmware

Nttdocomo

1 product

Wi Fi Station Sh 52a Firmware

Configuration A

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_1_11g
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_1_11j
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_1_11k
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_1_11l
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_1_26f
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_1_26g
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_1_26j
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_2_03b
Nttdocomo Wi Fi Station Sh 52a Firmware	Version 38jp_2_03c