CVE-2021-20859

ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to execute an arbitrary OS command via unspecified vectors.

Summary:

Reference Links(if available):

https://jvn.jp/en/jp/JVN88993473/index.html

https://www.elecom.co.jp/news/security/20211130-01/

CVSS Score (if available)

v2: / HIGH

v3: /

Links to Exploits(if available)

Tags: CVE, CVE-2021-20859, MISC, Third Party Advisory, vulnerability

CVE-2021-20859

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

Brute Ratel C4 Detected – 213[.]199[.]35[.]149:443

Brute Ratel C4 Detected – 52[.]193[.]137[.]127:80

Brute Ratel C4 Detected – 18[.]181[.]61[.]11:80

GoPhish Login Page Detected – 164[.]92[.]223[.]34:3333

GoPhish Login Page Detected – 46[.]101[.]213[.]152:3333

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Brute Ratel C4 Detected – 213[.]199[.]35[.]149:443

Brute Ratel C4 Detected – 52[.]193[.]137[.]127:80

Brute Ratel C4 Detected – 18[.]181[.]61[.]11:80

GoPhish Login Page Detected – 164[.]92[.]223[.]34:3333

GoPhish Login Page Detected – 46[.]101[.]213[.]152:3333