Vulnerability · Published Jan 16, 2026 · Assigned by VulnCheck
CVE-2021-47820Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)
Medium 5.3
In plain English
A medium-severity cross-site request forgery in Ubee EVW327 from Ubeeinteractive. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 89.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ubeeinteractive | Ubee EVW327 | EVW327 |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
References
- ExploitDB-49920 exploit
- Ubee Interactive Official Homepage product
- VulnCheck Advisory: Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF) third-party-advisory