NetSight
IP …
medium5.4

CVE-2021-20843

Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier,…

Impact

Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to alter the settings of the product via a specially crafted web page.

Affected products

VendorProductAffected versions
YamahaRtx830 Firmware
through 15.02.17
YamahaNvr510 Firmware
through 15.01.18
YamahaNvr700w Firmware
through 15.00.19
YamahaRtx1210 Firmware
through 14.01.38
Ntt-WestBiz Box Rtx830 Firmware
through 15.02.17
Ntt-WestBiz Box Nvr510 Firmware
before 15.01.18
Ntt-WestBiz Box Nvr700w Firmware
through 15.00.19
Ntt-WestBiz Box Rtx1210 Firmware
through 14.01.38

Weakness classification

CWE-829

References