CVE-2021-20847: Nttdocomo Wi-Fi Station Sh-52a Firmware

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device.

Affected products

• Nttdocomo Wi-Fi Station Sh-52a Firmware: version 38jp_1_11g only; version 38jp_1_11j only; version 38jp_1_11k only; version 38jp_1_11l only; version 38jp_1_26f only; version 38jp_1_26g only; …

Published 2021-12-01. Last modified 2026-06-17.