CVE-2021-20651

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-02-12 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a directory which can be accessed with the application privileges via unspecified vectors.

Affected products

ELECOM CO.,LTD. ELECOM File Manager: all versions

References

https://jvn.jp/en/jp/JVN98115035/index.html
https://www.elecom.co.jp/news/security/20210126-01/
https://jvn.jp/en/jp/JVN98115035/index.html
https://www.elecom.co.jp/news/security/20210126-01/

Get alerted when CVE-2021-20651 or the next vulnerability affects your stack