NetSight
IP …
medium5.7

CVE-2021-20844

Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and e…

Impact

Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to obtain sensitive information via a specially crafted web page.

Affected products

VendorProductAffected versions
YamahaRtx830 Firmware
through 15.02.17
YamahaNvr510 Firmware
through 15.01.18
YamahaNvr700w Firmware
through 15.00.19
YamahaRtx1210 Firmware
through 14.01.38
Ntt-WestBiz Box Rtx830 Firmware
through 15.02.17
Ntt-WestBiz Box Nvr510 Firmware
before 15.01.18
Ntt-WestBiz Box Nvr700w Firmware
through 15.00.19
Ntt-WestBiz Box Rtx1210 Firmware
through 14.01.38

Weakness classification

CWE-116

References