CVE-2021-20855: Elecom Wrh-733gbk Firmware

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

• Elecom Wrh-733gbk Firmware: up to and including 1.02.9
• Elecom Wrh-733gwh Firmware: up to and including 1.02.9

Published 2021-12-01. Last modified 2026-06-17.