Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

CVE-2021-20121

EPSS 0.07% · P22
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-20121

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and making a series of crafted requests to the device's web interface.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Telus Wi-Fi Hub 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Telus Wi-Fi Hub是加拿大研科(Telus)公司的一个 WiFi 集线器。 Telus Wi-Fi Hub 存在安全漏洞,该漏洞源于固件版本为 3.00.20 的 Telus Wi-Fi 集线器 (PRV65B444A-S-TS) 容易受到经过身份验证的任意文件读取的攻击。对设备具有物理访问权限的经过身份验证的用户可以通过准备专门准备的 USB 驱动器并将其连接到设备,并向设备的 Web 界面发出一系列精心设计的请求,从而从设备读取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Telus Wi-Fi Hub (PRV65B444A-S-TS) 3.00.20 -

II. Public POCs for CVE-2021-20121

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-20121

登录查看更多情报信息。

Other References for CVE-2021-20121 (1)

Same Patch Batch · n/a · 2021-10-11 · 39 CVEs total

CVE-2021-234486.5 MEDIUMPrototype Pollution
CVE-2021-42137Zammad 安全漏洞
CVE-2021-40886ProjectSend 路径遍历漏洞
CVE-2021-40887ProjectSend 路径遍历漏洞
CVE-2021-40888ProjectSend 跨站脚本漏洞
CVE-2021-40889CMSUno 代码注入漏洞
CVE-2021-35060OpenWay Group WAY4 ACS 安全漏洞
CVE-2021-35059OpenWay Group Way4 Acs 跨站脚本漏洞
CVE-2021-41801MediaWiki 安全漏洞
CVE-2021-42139Deno 代码注入漏洞
CVE-2021-40884Projectsend 安全漏洞
CVE-2021-42135Hashicorp HashiCorp Vault 安全漏洞
CVE-2021-41055Gajim 安全漏洞
CVE-2021-42134Django 跨站脚本漏洞
CVE-2021-32028PostgreSQL 信息泄露漏洞
CVE-2021-41798MediaWiki 跨站脚本漏洞
CVE-2021-41799MediaWiki 资源管理错误漏洞
CVE-2021-41800MediaWiki 访问控制错误漏洞
CVE-2021-42257Suse Check_smart 输入验证错误漏洞
CVE-2021-42260TinyXML 安全漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-20121

No comments yet


Leave a comment