Cross-site scripting in NEC Corporation WG2600HS
Priority LOW 22CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to inject an arbitrary script via the network.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00232 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NEC Corporation | WG2600HS | Ver.1.7.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WG2600HP4 | Ver.1.4.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WG2600HM4 | Ver.1.4.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WG2600HS2 | Ver.1.3.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WX3000HP | Ver.2.4.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WX4200D5 | Ver.1.2.4 and earlier | — | No fix listed | CNA |
- WG2600HS VendorNEC Corporation Affected Ver.1.7.2 and earlier Fixed in — No fix listed CNA
- WG2600HP4 VendorNEC Corporation Affected Ver.1.4.2 and earlier Fixed in — No fix listed CNA
- WG2600HM4 VendorNEC Corporation Affected Ver.1.4.2 and earlier Fixed in — No fix listed CNA
- WG2600HS2 VendorNEC Corporation Affected Ver.1.3.2 and earlier Fixed in — No fix listed CNA
- WX3000HP VendorNEC Corporation Affected Ver.2.4.2 and earlier Fixed in — No fix listed CNA
- WX4200D5 VendorNEC Corporation Affected Ver.1.2.4 and earlier Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-0354
- 2026-10-03 Alias added: GHSA-qgh2-59hq-68f3
References
More NEC Corporation vulnerabilities
- TI-1999-00042 Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and… CVSS 3.1CRITICAL 9.8
- TI-2020-13174 XML external entity injection in NEC Corporation ExpressCluster CVSS 3.1HIGH 7.5
- TI-1999-00009 Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. CVSS 2.0HIGH 10.0
- TI-2018-08402 NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in… CVSS 3.1CRITICAL 9.8
- TI-2018-08403 NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI. CVSS 3.1CRITICAL 9.8
- TI-1999-00205 rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. CVSS 2.0HIGH 10.0
Sources
- CVE-2025-0354 · CVE Program
- CVE-2025-0354 · NVD
- FIRST EPSS
- GHSA-qgh2-59hq-68f3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences