Critical severity9.8NVD Advisory· Published Jul 17, 2023· Updated Jun 17, 2026

CVE-2021-37384

Description

RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Furukawa/ONU modelsdescription
Furukawa/ONU modelsllm-create
Furukawa/423 41w\/ac Firmware
cpe:2.3:o:furukawa:423-41w\/ac_firmware:*:*:*:*:*:*:*:*
Range: <1.2.0
Furukawa/Ld421 21w Firmware
cpe:2.3:o:furukawa:ld421-21w_firmware:*:*:*:*:*:*:*:*
Range: <1.5.0
Furukawa/Ld420 10r Firmware
cpe:2.3:o:furukawa:ld420-10r_firmware:*:*:*:*:*:*:*:*
Range: <1.4.0
Furukawa/Ld421 21wv Firmware
cpe:2.3:o:furukawa:ld421-21wv_firmware:*:*:*:*:*:*:*:*
Range: <1.5.0

Patches

Vulnerability mechanics

References

gist.githubusercontent.com/LuigiPolidorio/9fe61cf2edee63152161ffc52c39f6cd/raw/529cf49103e0fdf4eeb970fa1f62fa508ebe7c3c/reference.txtnvdThird Party Advisory
cwe.mitre.org/data/definitions/94.htmlnvdNot Applicable
owasp.org/www-community/attacks/Code_InjectionnvdNot Applicable
www.softwall.com.br/cves/publicacao-rce-html-injection-furukawa/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000