CVE-2023-3331

🗓️ 28 Jun 2023 01:19:45Reported by NECType

CVE-2023-3331: Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm routers allows an attacker to delete specific files

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2023-3331	28 Jun 202307:17	–	circl
CNNVD	NEC Aterm WG2200HP 路径遍历漏洞	27 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-3331	28 Jun 202301:19	–	cvelist
EUVD	EUVD-2023-43999	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#38343415: Multiple vulnerabilities in Aterm series	27 Jun 202300:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in Aterm series	27 Jun 202306:12	–	jvn
NVD	CVE-2023-3331	28 Jun 202302:15	–	nvd
Prion	Design/Logic Flaw	28 Jun 202302:15	–	prion
Prion	Design/Logic Flaw	28 Jun 202302:15	–	prion
Prion	Command injection	28 Jun 202302:15	–	prion

NVD

Node

nec aterm_wf300hp_firmwareMatch-

AND

nec aterm_wf300hpMatch-

Node

nec aterm_wg1400hp_firmwareMatch-

AND

nec aterm_wg1400hpMatch-

Node

nec aterm_wg1800hp_firmwareMatch-

AND

nec aterm_wg1800hpMatch-

Node

nec aterm_wg1800hp2_firmwareMatch-

AND

nec aterm_wg1800hp2Match-

Node

nec aterm_wg2200hp_firmwareMatch-

AND

nec aterm_wg2200hpMatch-

Node

nec aterm_wg2600hp_firmwareMatch-

AND

nec aterm_wg2600hpMatch-

Node

nec aterm_wg2600hp2_firmwareMatch-

AND

nec aterm_wg2600hp2Match-

Node

nec aterm_wg300hp_firmwareMatch-

AND

nec aterm_wg300hpMatch-

Node

nec aterm_wg600hp_firmwareMatch-

AND

nec aterm_wg600hpMatch-

Node

nec aterm_wr8600n_firmwareMatch-

AND

nec aterm_wr8600nMatch-

Node

nec aterm_wr8700n_firmwareMatch-

AND

nec aterm_wr8700nMatch-

Node

nec aterm_wr8750n_firmwareMatch-

AND

nec aterm_wr8750nMatch-

Node

nec aterm_wr9300n_firmwareMatch-

AND

nec aterm_wr9300nMatch-

Node

nec aterm_wr9500n_firmwareMatch-

AND

nec aterm_wr9500nMatch-

Node

nec aterm_wr8170n_firmwareMatch-

AND

nec aterm_wr8170nMatch-

Node

nec aterm_wr8175n_firmwareMatch-

AND

nec aterm_wr8175nMatch-

Node

nec aterm_wr8370n_firmwareMatch-

AND

nec aterm_wr8370nMatch-

[
  {
    "defaultStatus": "unknown",
    "product": "Aterm WG2600HP2",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WG2600HP",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WG2200HP",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WG2200HP",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WG1800HP2",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WG1800HP",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WG1400HP",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WG600HP",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WG300HP",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WF300HP",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WR9500N",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WR9300N",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WR8750N",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WR8700N",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WR8600N",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WR8370N",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WR8175N",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Aterm WR8170N",
    "vendor": "NEC Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

Source	Link
https	www.https//jpn.nec.com/security-info/secinfo/nv23-007_en.html

21 Nov 2024 08:17Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.4

EPSS0.00157

SSVC

CWE-22