ELECOM CO.,LTD. WRC-300FEBK-A

• CVE-2021-20646 Unrated Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. 0.5%
• CVE-2021-20645 Unrated Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors. 0.8%