Read the docs

NEC Corporation

Records141All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical37CVSS 9.0–10.0
CVSS high66CVSS 7.0–8.9

Exploited now

NEC Corporation records in CISA KEV

No NEC Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Aterm Wg1200hp Firmware · all components

Priority MEDIUM 50

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, W…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2024-03-28 No fix listed CWE-287
Priority MEDIUM 50

Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG22…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00624 Published 2024-03-28 No fix listed CWE-912
Priority MEDIUM 50

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, W…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0065 Published 2024-03-28 No fix listed CWE-287
Priority MEDIUM 44

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG12…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00674 Published 2024-03-28 No fix listed CWE-78
Priority MEDIUM 44

Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00689 Published 2024-03-28 No fix listed CWE-121
Priority MEDIUM 44

Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00577 Published 2024-03-28 No fix listed CWE-259
Priority MEDIUM 44

Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00624 Published 2024-03-28 No fix listed CWE-489
Priority MEDIUM 44

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, W…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0065 Published 2024-03-28 No fix listed CWE-287
Priority LOW 34

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01399 Published 2019-01-09 No fix listed CWE-78
Priority LOW 34

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01399 Published 2019-01-09 No fix listed CWE-78
Priority LOW 34

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01399 Published 2019-01-09 No fix listed CWE-78
Priority LOW 34

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01399 Published 2019-01-09 No fix listed CWE-78
TI-2021-03906 CVE-2021-20680 · GHSA-qrw9-9x9v-8v9p

Cross-site scripting in NEC Aterm devices

Priority LOW 29

Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firm…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00796 Published 2021-04-26 No fix listed CWE-79
Priority LOW 27

Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG…

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.00483 Published 2024-03-28 No fix listed CWE-284
Priority LOW 25

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, W…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00486 Published 2024-03-28 No fix listed CWE-287
TI-2024-18606 CVE-2024-28005 · GHSA-fqmj-j6qq-43c5

Code injection in NEC Corporation WG1800HP4

Priority LOW 22

Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP…

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00481 Published 2024-03-28 No fix listed CWE-250
Open these records in search →