CVE:CVE-2021-20843
CNNVD:CNNVD-202111-2070
Yamaha NVR500等都是日本雅马哈（Yamaha）公司的产品。Yamaha NVR500是一款企业级路由器。Yamaha RTX810是一款千兆VPN（虚拟私人网络）路由器。Yamaha FWX120是一款防火墙产品。
多款 Yamaha 存在跨站脚本漏洞，该漏洞源于产品的web页面未对输入数据做有效验证。攻击者可通过该漏洞更改产品的设置。
solution:Upgrade yamaha rtx830_firmware to a higher version than 15.02.17,and avoid the version (,15.02.17]; Upgrade yamaha nvr510_firmware to a higher version than 15.01.18,and avoid the version (,15.01.18]; Upgrade yamaha nvr700w_firmware to a higher version than 15.00.19,and avoid the version (,15.00.19]; Upgrade yamaha rtx1210_firmware to a higher version than 14.01.38,and avoid the version (,14.01.38]; Upgrade ntt-west biz_box_rtx830_firmware to a higher version than 15.02.17,and avoid the version (,15.02.17]; Upgrade ntt-west biz_box_nvr510_firmware to a higher version than 15.01.18,and avoid the version (,15.01.18); Upgrade ntt-west biz_box_nvr700w_firmware to a higher version than 15.00.19,and avoid the version (,15.00.19]; Upgrade ntt-west biz_box_rtx1210_firmware to a higher version than 14.01.38,and avoid the version (,14.01.38]