CVE-2021-47820: Ubeeinteractive Ubee EVW327

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent.

Affected products

• Ubeeinteractive Ubee EVW327

Published 2026-01-16. Last modified 2026-06-17.