CVE-2021-20620: XSS
Published Jan 28, 2021
·Updated
Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
Affected Software
2 affected components
Aterm WG2600HP firmware<=1.0.9
Aterm WG2600HP
Remediation
Patch Available
Event History
Jan 28, 2021
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-20620?
CVE-2021-20620 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2021-20620?
To fix CVE-2021-20620, upgrade the Aterm WF800HP firmware to version 1.0.10 or later.
3
What type of vulnerability is CVE-2021-20620?
CVE-2021-20620 is classified as a cross-site scripting (XSS) vulnerability.
4
Which devices are affected by CVE-2021-20620?
CVE-2021-20620 affects Aterm WG2600HP firmware version 1.0.9 and earlier.
5
Can CVE-2021-20620 be exploited remotely?
Yes, CVE-2021-20620 can be exploited remotely by attackers injecting arbitrary scripts.