medium6.1
CVE-2021-20847
Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and…
Impact
Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nttdocomo | Wi-Fi Station Sh-52a Firmware | Versions 38jp_1_11g, 38jp_1_11j, 38jp_1_11k, 38jp_1_11l, 38jp_1_26f, 38jp_1_26g |