What’s Vulnerable › Vulnerabilities

CVE-2021-20739

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-07 · updated 2026-06-17
• Weakness: CWE-78

Description

WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.

Affected products

• Elecom Wrc-300Febk Firmware: all versions
• Elecom Wrc-733Febk Firmware: all versions
• Elecom Wrc-F300Nf Firmware: all versions
• Elecom Wrh-300Bk-S Firmware: all versions
• Elecom Wrh-300Bk Firmware: all versions
• Elecom Wrh-300Rd Firmware: all versions
• Elecom Wrh-300Sv Firmware: all versions
• Elecom Wrh-300Wh-S Firmware: all versions
• Elecom Wrh-300Wh Firmware: all versions
• Elecom Wrh-H300Bk Firmware: all versions
• Elecom Wrh-H300Wh Firmware: all versions

References

• https://jvn.jp/en/vu/JVNVU94260088/index.html
• https://www.elecom.co.jp/news/security/20210706-01/
• https://jvn.jp/en/vu/JVNVU94260088/index.html
• https://www.elecom.co.jp/news/security/20210706-01/

Get alerted when CVE-2021-20739 or the next vulnerability affects your stack