Vulnerabilities > Elecom > WRC 300Febk A Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-02-12 CVE-2021-20646 Cross-Site Request Forgery (CSRF) vulnerability in Elecom Wrc-300Febk-A Firmware
Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector.
network
elecom CWE-352
4.3
2021-02-12 CVE-2021-20645 Cross-site Scripting vulnerability in Elecom Wrc-300Febk-A Firmware
Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors.
network
elecom CWE-79
4.3