CVE-2021-20739
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH...
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
- Record
CVE-2021-20739- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.8 Medium
AV:A/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List No score
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
- Record
CVE-2021-20739- Updated
- 2026-11-02
EUVDEUVD-2021-8153 No score
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
- Record
EUVD-2021-8153- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6g7g-h77w-72mh No score
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH...
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
- Record
GHSA-6g7g-h77w-72mh- Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
- elecom co.,ltd. wrc-300febk, wrc-f300nf, wrc-733febk, wrh-300rd, wrh-300bk, wrh-300sv, wrh-300wh, wrh-h300wh, wrh-h300bk, wrh-300bk-s, and wrh-300wh-s
- elecom wrc-300febk firmware
- elecom wrc-733febk firmware
- elecom wrc-f300nf firmware
- elecom wrh-300bk-s firmware
- elecom wrh-300bk firmware
- elecom wrh-300rd firmware
- elecom wrh-300sv firmware
- elecom wrh-300wh-s firmware
- elecom wrh-300wh firmware
- elecom wrh-h300bk firmware
- elecom wrh-h300wh firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-20739 is a high vulnerability (CVSS 8.8) in Elecom Co.,ltd. Wrc-300febk, Wrc-f300nf, Wrc-733febk, Wrh-300rd, Wrh-300bk, Wrh-300sv, Wrh-300wh, Wrh-h300wh, Wrh-h300bk, Wrh-300bk-s, And Wrh-300wh-s, published July 7, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 44th percentile. No source names a fixed version.