Vulnerability · Published Oct 11, 2021 · Assigned by tenable
CVE-2021-20121
Medium 4.0
In plain English
A medium-severity security flaw in Telus Wi-Fi Hub (PRV65B444A-S-TS). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS NVD)4.0Medium
Exploit odds (30 days)0.5%top 57.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and making a series of crafted requests to the device's web interface.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Telus Wi-Fi Hub (PRV65B444A-S-TS) | 3.00.20 |
References
- https://www.tenable.com/security/research/tra-2021-41 x_refsource_MISC