New MCP server — Bring vulnerability intelligence into your AI
Patrowl Intel
Back to feed

CVE-2021-20644

NVDCIRCLENISA

EUVD-2021-8062 · Published Feb 12, 2021

ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page.

Technologies

Elecom Wrc-1467Ghbk-AElecom Wrc-1467Ghbk-A Firmware

Weaknesses

CWE-74

CVSS scores

  • v3.16.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • v2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access Execution Stealth Defense Impairment
T1190Exploit Public-Facing ApplicationT1027Obfuscated Files or InformationT1574.006Dynamic Linker HijackingT1574.007Path Interception by PATH Environment VariableT1690Prevent Command History Logging

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

Book your demo
PatrowlIntel platform screenshot