CVE-2021-20677
First published: Fri Mar 26 2021(Updated: )
UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Necplatforms Univerge Aspire Wx | >=1.00<=3.51 | |
| Necplatforms Univerge Aspire Wx Firmware | ||
| Necplatforms Univerge Aspire Ux Firmware | >=1.00<=9.70 | |
| Necplatforms Univerge Aspire Ux Firmware | ||
| Necplatforms Univerge Sv9100 | >=1.00<=10.70 | |
| NEC Univerge Sv9100 WebPro | ||
| NEC Platforms SL2100 | >=1.00<=3.00 | |
| NEC SL2100 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-20677?
CVE-2021-20677 is classified as a high-severity vulnerability due to its potential to cause a denial of service condition.
How do I fix CVE-2021-20677?
To mitigate CVE-2021-20677, users should upgrade their UNIVERGE Aspire series PBX to the latest secure firmware version.
Which systems are affected by CVE-2021-20677?
CVE-2021-20677 affects UNIVERGE Aspire WX, Aspire UX, SV9100, and SL2100 systems running specific firmware versions.
What type of vulnerability is CVE-2021-20677?
CVE-2021-20677 is a remote authenticated denial of service vulnerability.
Can CVE-2021-20677 be exploited remotely?
Yes, CVE-2021-20677 can be exploited by remote authenticated attackers.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/necplatforms
- canonical/necplatforms univerge aspire wx
- version/necplatforms univerge aspire wx/1.00
- version/necplatforms univerge aspire wx/3.51
- canonical/necplatforms univerge aspire wx firmware
- canonical/necplatforms univerge aspire ux firmware
- version/necplatforms univerge aspire ux firmware/1.00
- version/necplatforms univerge aspire ux firmware/9.70
- canonical/necplatforms univerge sv9100
- version/necplatforms univerge sv9100/1.00
- version/necplatforms univerge sv9100/10.70
- canonical/nec univerge sv9100 webpro
- canonical/nec platforms sl2100
- version/nec platforms sl2100/1.00
- version/nec platforms sl2100/3.00
- canonical/nec sl2100