CVE-2021-20738 - Vulnerability Details - OpenCVE

WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Elecom	Wrc-1167fs-b Wrc-1167fs-b Firmware Wrc-1167fs-w Wrc-1167fs-w Firmware Wrc-1167fsa Wrc-1167fsa Firmware

Configuration 1 [-]

AND

cpe:2.3:o:elecom:wrc-1167fs-w_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:elecom:wrc-1167fs-w:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:elecom:wrc-1167fs-b_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:elecom:wrc-1167fs-b:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:elecom:wrc-1167fsa_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:elecom:wrc-1167fsa:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU94260088/index.html
https://www.elecom.co.jp/news/security/20210706-01/

History

No history.

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2021-07-07T07:05:24

Updated: 2024-08-03T17:53:21.857Z

Reserved: 2020-12-17T00:00:00

Link: CVE-2021-20738

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-07-07T08:15:07.737

Modified: 2024-11-21T05:47:06.430

Link: CVE-2021-20738

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA", "vendor": "ELECOM CO.,LTD.", "versions": [{"status": "affected", "version": "all versions"}]}], "descriptions": [{"lang": "en", "value": "WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "Information Disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-07-07T07:05:24", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.elecom.co.jp/news/security/20210706-01/"}, {"tags": ["x_refsource_MISC"], "url": "https://jvn.jp/en/vu/JVNVU94260088/index.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "vultures@jpcert.or.jp", "ID": "CVE-2021-20738", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA", "version": {"version_data": [{"version_value": "all versions"}]}}]}, "vendor_name": "ELECOM CO.,LTD."}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Information Disclosure"}]}]}, "references": {"reference_data": [{"name": "https://www.elecom.co.jp/news/security/20210706-01/", "refsource": "MISC", "url": "https://www.elecom.co.jp/news/security/20210706-01/"}, {"name": "https://jvn.jp/en/vu/JVNVU94260088/index.html", "refsource": "MISC", "url": "https://jvn.jp/en/vu/JVNVU94260088/index.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T17:53:21.857Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.elecom.co.jp/news/security/20210706-01/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jvn.jp/en/vu/JVNVU94260088/index.html"}]}]}, "cveMetadata": {"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2021-20738", "datePublished": "2021-07-07T07:05:24", "dateReserved": "2020-12-17T00:00:00", "dateUpdated": "2024-08-03T17:53:21.857Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:elecom:wrc-1167fs-w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "32BB042A-973D-4071-9115-71E0E23B5E17", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:elecom:wrc-1167fs-w:-:*:*:*:*:*:*:*", "matchCriteriaId": "6480B42F-D31C-474D-98B8-687190848435", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:elecom:wrc-1167fs-b_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "97CB05BB-87CA-4946-8DD6-3A0F9E063CD7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:elecom:wrc-1167fs-b:-:*:*:*:*:*:*:*", "matchCriteriaId": "779CF807-E062-46DB-9FA6-02868954E775", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:elecom:wrc-1167fsa_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "13602337-BBEE-49BF-966B-E0C8CA0ABF8A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:elecom:wrc-1167fsa:-:*:*:*:*:*:*:*", "matchCriteriaId": "075D2CA0-9D9C-44F8-804F-42A8BBAF076F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors."}, {"lang": "es", "value": "WRC-1167FS-W, WRC-1167FS-B y WRC-1167FSA todas las versiones permiten a un atacante no autenticado adyacente a la red obtener informaci\u00f3n confidencial por medio de vectores no especificados"}], "id": "CVE-2021-20738", "lastModified": "2024-11-21T05:47:06.430", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 3.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 6.5, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-07-07T08:15:07.737", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU94260088/index.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://www.elecom.co.jp/news/security/20210706-01/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU94260088/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.elecom.co.jp/news/security/20210706-01/"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}