CVE-2021-20643

Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a specially crafted request.

Score

CVSS 3.1 7.5 High

Status

Modified - vultures@jpcert.or.jp

Published

2021-02-12

Last modified

2024-08-03

Weaknesses

CWE-284

Affected products

• Ld-ps/u1 Firmware (Elecom)
• Ld-psu1 (Elecom Co.ltd.)

References

• https://jvn.jp/en/jp/JVN47580234/index.html
• https://www.elecom.co.jp/news/security/20210126-01/