High severity7.2NVD Advisory· Published Apr 26, 2021· Updated Jun 17, 2026

CVE-2021-20709

Description

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to a specific URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NEC/Aterm Wf1200cr Firmware
cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*
Range: <=1.3.2
NEC/Aterm Wg1200cr Firmware
cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*
Range: <=1.3.3
NEC/Aterm Wg2600hs Firmware
cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*
Range: <=1.5.1
NEC/Aterm WG2600HPllm-fuzzy
Range: <=1.5.1
NEC/Aterm WF1200CRSllm-fuzzy
Range: <=1.3.2
NEC/Aterm WG1200CRSllm-fuzzy
Range: <=1.3.3
NEC Corporation/NEC Aterm devicesv5
Range: Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier

Patches

Vulnerability mechanics

References

jpn.nec.com/security-info/secinfo/nv21-010.htmlnvdMitigationVendor Advisory
jvn.jp/en/jp/JVN29739718/index.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000