Missing authentication in NEC Corporation WG2600HS
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.
Summary
Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the network.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NEC Corporation | WG2600HS | Ver.1.7.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WF1200CR | Ver.1.6.0 and earlier | — | No fix listed | CNA |
| NEC Corporation | WG1200CR | Ver.1.5.0 and earlier | — | No fix listed | CNA |
| NEC Corporation | GB1200PE | Ver.1.3.0 and earlier | — | No fix listed | CNA |
| NEC Corporation | WG2600HP4 | Ver.1.4.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WG2600HM4 | Ver.1.4.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WG2600HS2 | Ver.1.3.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WX3000HP | Ver.2.4.2 and earlier | — | No fix listed | CNA |
| NEC Corporation | WX4200D5 | Ver.1.2.4 and earlier | — | No fix listed | CNA |
- WG2600HS VendorNEC Corporation Affected Ver.1.7.2 and earlier Fixed in — No fix listed CNA
- WF1200CR VendorNEC Corporation Affected Ver.1.6.0 and earlier Fixed in — No fix listed CNA
- WG1200CR VendorNEC Corporation Affected Ver.1.5.0 and earlier Fixed in — No fix listed CNA
- GB1200PE VendorNEC Corporation Affected Ver.1.3.0 and earlier Fixed in — No fix listed CNA
- WG2600HP4 VendorNEC Corporation Affected Ver.1.4.2 and earlier Fixed in — No fix listed CNA
- WG2600HM4 VendorNEC Corporation Affected Ver.1.4.2 and earlier Fixed in — No fix listed CNA
- WG2600HS2 VendorNEC Corporation Affected Ver.1.3.2 and earlier Fixed in — No fix listed CNA
- WX3000HP VendorNEC Corporation Affected Ver.2.4.2 and earlier Fixed in — No fix listed CNA
- WX4200D5 VendorNEC Corporation Affected Ver.1.2.4 and earlier Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-0355
- 2026-10-03 Alias added: GHSA-872h-pcfc-25m6
References
More NEC Corporation vulnerabilities
- TI-1999-00042 Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and… CVSS 3.1CRITICAL 9.8
- TI-2020-13174 XML external entity injection in NEC Corporation ExpressCluster CVSS 3.1HIGH 7.5
- TI-1999-00009 Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. CVSS 2.0HIGH 10.0
- TI-2018-08402 NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in… CVSS 3.1CRITICAL 9.8
- TI-2018-08403 NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI. CVSS 3.1CRITICAL 9.8
- TI-1999-00205 rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. CVSS 2.0HIGH 10.0
Sources
- CVE-2025-0355 · CVE Program
- CVE-2025-0355 · NVD
- FIRST EPSS
- GHSA-872h-pcfc-25m6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences