CVE-2021-32302 - CVE House
Back to Database
Status published Medium CVE-2021-32302

Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router...

Vulnerability Description

Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information via the Upload File parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-32302

Credits & Attribution

No credits recorded in the NVD database.

References

More from irz

View All →
CVE-2022-27226
A CSRF issue in /api/crontab on iRZ Mobile Routers through...
High 8.8
CVE-2016-2309
iRZ RUH2 before 2b does not validate firmware patches, which...
High 7.2

Affected Vendor

Affected Software

ruh2 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: February 27th, 2023
Last Modified: July 9th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.