VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 2, 2021· Updated Jun 17, 2026

CVE-2021-32019

CVE-2021-32019

Description

There is missing input validation of host names displayed in OpenWrt before 19.07.8. The Connection Status page of the luci web-interface allows XSS, which can be used to gain full control over the affected system via ICMP.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Openwrt/Openwrt2 versions
    cpe:2.3:o:openwrt:openwrt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:openwrt:openwrt:*:*:*:*:*:*:*:*range: >=19.07.0,<19.07.8
    • (no CPE)range: <19.07.8
  • OpenWrt/OpenWrtdescription
  • Openwrt/luci web-interfacellm-create
    Range: <19.07.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.