CVE-2021-20677

Severity: low (CVSS 3.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-03-26 · updated 2026-06-17

Description

UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command.

Affected products

Necplatforms Sl2100 Firmware: from 1.00 through 3.00
Necplatforms Univerge Aspire Ux Firmware: from 1.00 through 9.70
Necplatforms Univerge Aspire Wx Firmware: from 1.00 through 3.51
Necplatforms Univerge Sv9100 Firmware: from 1.00 through 10.70

References

https://jvn.jp/en/jp/JVN12737530/index.html
https://www.necplatforms.co.jp/en/press/security_adv.html
https://jvn.jp/en/jp/JVN12737530/index.html
https://www.necplatforms.co.jp/en/press/security_adv.html

Get alerted when CVE-2021-20677 or the next vulnerability affects your stack