CVE-2021-37386

Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function.

• CWE-79
• CWE-79

• https://cwe.mitre.org/data/definitions/79.htmlNot Applicable
• https://gist.githubusercontent.com/LuigiPolidorio/ec78daac7c3d97966f2e3703ca5d1685/raw/d64a487407d6f9685d3907206954a6c84c6fa621/reference.txtThird Party Advisory
• https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/11-Client-side_Testing/03-Testing_for_HTML_InjectionNot Applicable
• https://www.softwall.com.br/cves/publicacao-rce-html-injection-furukawa/
• https://cwe.mitre.org/data/definitions/79.htmlNot Applicable
• https://gist.githubusercontent.com/LuigiPolidorio/ec78daac7c3d97966f2e3703ca5d1685/raw/d64a487407d6f9685d3907206954a6c84c6fa621/reference.txtThird Party Advisory
• https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/11-Client-side_Testing/03-Testing_for_HTML_InjectionNot Applicable
• https://www.softwall.com.br/cves/publicacao-rce-html-injection-furukawa/

Published

Jul 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37377Cross Site Scripting (XSS) vulnerability in Teradek Brik fir…5.4
• CVE-2021-37378Cross Site Scripting (XSS) vulnerability in Teradek Cube and…5.4
• CVE-2021-37379Cross Site Scripting (XSS) vulnerability in Teradek Sphere a…5.4
• CVE-2021-3738In DCE/RPC it is possible to share the handles (cookies for …8.8
• CVE-2021-37381Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers …8.8
• CVE-2021-37384RCE (Remote Code Execution) vulnerability was found in some …9.8
• CVE-2021-37388A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipad…9.8
• CVE-2021-37389Chamilo 1.11.14 allows stored XSS via main/install/index.php…6.1
• CVE-2021-3739A NULL pointer dereference flaw was found in the btrfs_rm_de…7.1
• CVE-2021-37390A Chamilo LMS 1.11.14 reflected XSS vulnerability exists in …6.1
• CVE-2021-37391A user without privileges in Chamilo LMS 1.11.14 can send an…5.4
• CVE-2021-37392In RPCMS v1.8 and below, the "nickname" variable is not prop…5.4