Medium severity5.4NVD Advisory· Published Nov 24, 2021· Updated Jun 17, 2026
CVE-2021-20843
CVE-2021-20843
Description
Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to alter the settings of the product via a specially crafted web page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13- cpe:2.3:o:ntt-west:biz_box_nvr510_firmware:*:*:*:*:*:*:*:*Range: <15.01.18
- cpe:2.3:o:ntt-west:biz_box_nvr700w_firmware:*:*:*:*:*:*:*:*Range: <=15.00.19
- cpe:2.3:o:ntt-west:biz_box_rtx1210_firmware:*:*:*:*:*:*:*:*Range: <=14.01.38
- cpe:2.3:o:ntt-west:biz_box_rtx830_firmware:*:*:*:*:*:*:*:*Range: <=15.02.17
- Yamaha Corporation/RTX830, NVR510, NVR700W, RTX1210v5Range: RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, RTX1210 Rev.14.01.38 and earlier
Patches
Vulnerability mechanics
References
4- www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91161784.htmlnvdMitigationVendor Advisory
- business.ntt-east.co.jp/topics/2021/11_09.htmlnvdMitigationVendor Advisory
- jvn.jp/en/vu/JVNVU91161784/index.htmlnvdMitigationThird Party Advisory
- www.ntt-west.co.jp/smb/kiki_info/info/211109.htmlnvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.