Vulnerability Details : CVE-2021-20635
Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network.
Products affected by CVE-2021-20635
- cpe:2.3:o:logitech:lan-wh450n\/gr_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-20635
0.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 24 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-20635
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
3.3
|
LOW | AV:A/AC:L/Au:N/C:P/I:N/A:N |
6.5
|
2.9
|
NIST | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST |
CWE ids for CVE-2021-20635
-
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-20635
-
https://www.elecom.co.jp/news/security/20210126-01/
無線LANルーターなどネットワーク製品の一部における脆弱性に関して - 最新情報 - セキュリティ情報｜ELECOMVendor Advisory
-
https://jvn.jp/en/jp/JVN96783542/index.html
JVN#96783542: Multiple vulnerabilities in multiple LOGITEC productsThird Party Advisory
Jump to