CVE-2021-20844 - CVE House
Back to Database
Status published Medium CVE-2021-20844

Improper neutralization of HTTP request headers for scripting syntax vulnerability...

Vulnerability Description

Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to obtain sensitive information via a specially crafted web page.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-20844

Credits & Attribution

No credits recorded in the NVD database.

References

More from Yamaha Corporation

View All →
CVE-2024-22366
Active debug code exists in Yamaha wireless LAN access point...
Unknown 0
CVE-2021-20843
Cross-site script inclusion vulnerability in the Web GUI of RTX830...
Medium 5.4
CVE-2020-5548
Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit...
High 7.5
CVE-2018-0666
Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier,...
Medium 6.8
CVE-2018-0665
Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier,...
Medium 6.8

Affected Vendor

Yamaha Corporation

View all reports →

Affected Software

RTX830, NVR510, NVR700W, RTX1210
Vulnerable Versions:
RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, RTX1210 Rev.14.01.38 and earlier

Timeline

Official Publish: November 24th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.