CVE-2021-20739
Estado: ModificadaAlta (8.8)—
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.51%
- Percentil entre todas las CVEs puntuadas: 42
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (11)
Elecom — Wrc-300febk FirmwareElecom — Wrc-733febk FirmwareElecom — Wrc-f300nf FirmwareElecom — Wrh-300bk-s FirmwareElecom — Wrh-300bk FirmwareElecom — Wrh-300rd FirmwareElecom — Wrh-300sv FirmwareElecom — Wrh-300wh-s FirmwareElecom — Wrh-300wh FirmwareElecom — Wrh-h300bk FirmwareElecom — Wrh-h300wh Firmware
CWE
- CWE-78
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-20739",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5.8,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "vultures@jpcert.or.jp",
"affectedData": [
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
}
]
}
],
"published": "2021-07-07T08:15:07.813",
"references": [
{
"url": "https://jvn.jp/en/vu/JVNVU94260088/index.html",
"tags": [
"Third Party Advisory"
],
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://www.elecom.co.jp/news/security/20210706-01/",
"tags": [
"Vendor Advisory"
],
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://jvn.jp/en/vu/JVNVU94260088/index.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.elecom.co.jp/news/security/20210706-01/",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors."
},
{
"lang": "es",
"value": "WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S y WRH-300WH-S, todas las versiones, permiten a un atacante no autenticado adyacente a la red ejecutar un comando arbitrario del sistema operativo por medio de vectores no especificados"
}
],
"lastModified": "2026-06-17T03:34:20.973",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrc-300febk_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "634C6410-3AC8-4770-8D3F-AF12B39BCEB4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrc-300febk:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8AD07548-B957-4275-BE59-F40940E078A7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrc-f300nf_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BE6FA33-6CC9-4AFC-B6EC-8BEE7BE7BAE7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrc-f300nf:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DF251645-9505-49CC-BA4D-1CA454D639D1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrc-733febk_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCFD89BC-4736-4BEA-A1E5-42305D9E1B88"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrc-733febk:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2152FA45-F61F-4347-B9B3-992C994D1B64"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrh-300rd_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1AA5CB5-25F3-4995-9254-8E0214B2DD4A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrh-300rd:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5398598E-4579-44DF-95FB-EBB2871A248E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrh-300bk_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C184A52-C8E1-4604-9204-575282410CA1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrh-300bk:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "89ED96E9-D73D-42E7-A86F-7A73E00D2B86"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrh-300sv_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6E69313-490A-4263-B01E-81E31C9AC805"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrh-300sv:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6D4159F7-1DF3-4827-9784-E338CC3E7D93"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrh-300wh_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7288F3AF-F903-4AD5-8680-EFCD23ACC333"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrh-300wh:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E458D9A1-C2AF-4A8F-AC52-8A9D25C303ED"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrh-h300wh_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D857DD7-F3D3-4874-A9C5-3F8161381C1E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrh-h300wh:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A8C25CFC-393E-4487-965F-8F922723346F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrh-h300bk_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1941F445-18F2-42E7-BF96-26B82FDC05BA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrh-h300bk:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "99341BF6-FD30-421A-9E9C-32C99B6F75AD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrh-300bk-s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C727AFD4-B712-4E7F-9AF6-7F5FC5CBC255"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrh-300bk-s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "85EB981B-03EA-49B3-99EA-A8389F795C63"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:elecom:wrh-300wh-s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A866C31-CA0D-4A25-B19B-70F2F8A7A91E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:elecom:wrh-300wh-s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "887859FA-3FA7-40E4-BE7B-977C66CF4E37"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "vultures@jpcert.or.jp"
}