CVE-2024-28006

CVE-2024-28006 affects NEC Aterm series (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP, W1200EX(-MS), WG1200HS, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N,...

CVE-2024-28012

Summary: CVE-2024-28012 affects NEC Aterm series (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1810HP, WRkleh, etc.). The issue is described as an improper authentication vulnerability that enables an attacker to execute an arbitrary command with root privileges over the internet. What’s a...

CVE-2024-28010

CVE-2024-28010 affects NEC Aterm series devices (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, etc.). Root cause: use of hard-coded passwords in the device firmware, enabling an unauthenticated or weak-credential scenario that could permit an attacker to execute arbitrary OS comman...

CVE-2024-28005

CVE-2024-28005 affects NEC Aterm family (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WR8165N, WM3400RN, WG1810HP, and many others listed in sources). The root cause is an Incorrect Permission Assignment for a Critical Resource (CWE-732) that, when combined with high privileges, allows an attacker to e...

CVE-2024-28009

CVE-2024-28009 affects NEC Aterm router series (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, W1200EX-MS, WG1200HS/HP, WF300HP2, WR8165N, WG1810HP, MR01LN/MR02LN, WM3400RN, WR8400N, etc.). The issue is an improper authentication vulnerability that enables an attacker to ...

CVE-2024-28011

CVE-2024-28011 affects NEC Aterm series (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, W1200EX, WG1200HS/HP, WF300HP2, W300P, WR... etc. All versions allow an attacker to execute an arbitrary OS command with root privileges over the internet. Connected sources confirm a ...

CVE-2024-28014

Summary: CVE-2024-28014 is a stack-based buffer overflow in NEC Aterm devices (multiple WG/WR/WG18xx/WM/WF/others) that enables an attacker to execute arbitrary commands over the internet. Red Hat and JVN entries corroborate the vulnerability across many NEC Aterm model lines, including WG1800HP4...

CVE-2024-28016

CVE-2024-28016 concerns an Improper Access Control in NEC Aterm devices (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1200HS2, WG1900HP, W1200EX, WG1800HP4, WG1810HP, WR8200N, WM3800R, etc.). The root cause (as described in Red Hat, NVD, CVE lists) is exposure of device information to the ...

CVE-2024-28015

OS Command Injection (CWE-78) affecting NEC Aterm router series (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, WR8165N, WG1800HP4, WG1810HP(JE/MF), WM3400RN, CR2500P, MR01LN/MR02LN, etc.) allows an attacker to execute arbitrary commands with root pr...

CVE-2024-28013

CVE-2024-28013 concerns NEC Aterm devices (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP2, WG1200HS, WG1800HP, W1200EX-MS, CR2500P, WR8200N, WM3800R, WG1810HP, MR01LN, MR02LN, and many other WG/WG/WF/WR/WL models) where the vulnerability stems from Use of Insufficiently Random Values. The issue...

CVE-2024-28008

CVE-2024-28008 affects NEC Aterm routers (multiple models listed, incl. WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, etc.). Root cause: Active Debug Code in the device allows an attacker to execute arbitrary OS commands via the internet. Impact: unauthenticated remote command execution with high r...

CVE-2024-28007

The CVE-2024-28007 entry describes an improper authentication vulnerability in NEC Aterm devices (multiple WG/WR/WF/WM/WG series, including WG1800HP4, WG1200HS3, WG1900HP2, etc.) that enables an unauthenticated attacker to execute arbitrary commands with root privileges over the Internet. Connect...

CVE-2023-3331

CVE-2023-3331 concerns NEC Aterm devices (WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N, WR8170N) where “Improper Limitation of a Pathname to a Restricted Directory” allows an attacker to dele...

CVE-2023-3332

CVE-2023-3332 affects NEC Aterm models (WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N, WR8170N). Root cause: Improper Neutralization of Input During Web Page Generation. Impact: enables an att...

CVE-2023-3330

CVE-2023-3330 applies to NEC Aterm WG2600HP2/WG2600HP/WG2200HP/WG1800HP2/WG1800HP/WG1400HP/WG600HP/WG300HP/WF300HP/WR9500N/WR9300N/WR8750N/WR8700N/WR8600N/WR8370N/WR8175N/WR8170N (and related Red Hat references) with an improper limitation of a pathname to a restricted directory. The vulnerabilit...

CVE-2023-3333

Technical details for CVE-2023-3333 are not publicly available in the provided documents. Monitor for updates.