Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-12-01	CVE-2021-20847	Cross-site Scripting vulnerability in Nttdocomo Wi-Fi Station Sh-52A Firmware Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device. network low complexity nttdocomo CWE-79	6.1
2019-02-13	CVE-2019-5914	NULL Pointer Dereference vulnerability in Nttdocomo V20 PRO L-01J Firmware L01J20C/L01J20D V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same network range via a specially crafted access point. high complexity nttdocomo CWE-476	5.3