CVE-2021-20738 Information disclosure in WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA
Unauthenticated network-adjacent attackers can obtain sensitive information from ELECOM wireless routers via unspecified vectors.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-20738?
CVE-2021-20738 is a medium-severity vulnerability in ELECOM CO.,LTD. WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA, published on 7 Jul 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors.
Which versions are affected by CVE-2021-20738?
It affects 3 products.
Products include Elecom Wrc-1167fs-B Firmware, Elecom Wrc-1167fs-W Firmware, Elecom Wrc-1167fsa Firmware.
How do I fix CVE-2021-20738?
No fix has been published for CVE-2021-20738 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-20738 being exploited?
There is no known exploitation of CVE-2021-20738 in the wild and no public exploit code.
Sources
Also known as GHSA-9m73-cfj6-8gjc.