Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

18 records

Vendor: NEC Corporation Component: Aterm W300p Firmware Clear all filters
TI-2024-18615 CVE-2024-28014 · GHSA-v6qj-65jf-4qvc

Stack-based buffer overflow in NEC Corporation WG1800HP4

Priority MEDIUM 44

Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00689 Published 2024-03-28 No fix listed CWE-121
TI-2024-18616 CVE-2024-28015 · GHSA-47wm-wmj9-988c

OS command injection in NEC Corporation WG1800HP4

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG12…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00674 Published 2024-03-28 No fix listed CWE-78
TI-2024-18617 CVE-2024-28016 · GHSA-q8c2-5pg9-qp4h

Improper access control in NEC Corporation WG1800HP4

Priority LOW 27

Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG…

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.00483 Published 2024-03-28 No fix listed CWE-284
TI-2024-18613 CVE-2024-28012 · GHSA-4fwq-rwj5-pm2v

Improper authentication in NEC Corporation WG1800HP4

Priority MEDIUM 50

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, W…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2024-03-28 No fix listed CWE-287
TI-2024-18612 CVE-2024-28011 · GHSA-wrf8-rqf2-f8rc

Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3…

Priority MEDIUM 50

Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG22…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00624 Published 2024-03-28 No fix listed CWE-912
TI-2024-18611 CVE-2024-28010 · GHSA-rrmx-g79h-w4q7

Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2…

Priority MEDIUM 44

Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00577 Published 2024-03-28 No fix listed CWE-259
TI-2024-18610 CVE-2024-28009 · GHSA-m86q-2rv9-qf8h

Improper authentication in NEC Corporation WG1800HP4

Priority MEDIUM 50

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, W…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0065 Published 2024-03-28 No fix listed CWE-287
TI-2024-18609 CVE-2024-28008 · GHSA-5577-w73m-r8xv

Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3…

Priority MEDIUM 44

Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00624 Published 2024-03-28 No fix listed CWE-489
TI-2024-18608 CVE-2024-28007 · GHSA-35p2-8gmg-pp6j

Improper authentication in NEC Corporation WG1800HP4

Priority MEDIUM 44

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, W…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0065 Published 2024-03-28 No fix listed CWE-287
TI-2024-18607 CVE-2024-28006 · GHSA-q43x-m6x8-fxgx

Improper authentication in NEC Corporation WG1800HP4

Priority LOW 25

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, W…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00486 Published 2024-03-28 No fix listed CWE-287
TI-2024-18606 CVE-2024-28005 · GHSA-fqmj-j6qq-43c5

Code injection in NEC Corporation WG1800HP4

Priority LOW 22

Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP…

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00481 Published 2024-03-28 No fix listed CWE-250
TI-2021-03906 CVE-2021-20680 · GHSA-qrw9-9x9v-8v9p

Cross-site scripting in NEC Aterm devices

Priority LOW 29

Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firm…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00796 Published 2021-04-26 No fix listed CWE-79
TI-2018-00588 CVE-2018-0633 · GHSA-5jvj-q2p4-hx7g

Memory corruption in NEC Corporation Aterm W300P

Priority LOW 35

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.018 Published 2019-01-09 No fix listed CWE-119
TI-2018-00587 CVE-2018-0632 · GHSA-5766-5253-xv8m

Memory corruption in NEC Corporation Aterm W300P

Priority LOW 35

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.018 Published 2019-01-09 No fix listed CWE-119
TI-2018-00586 CVE-2018-0631 · GHSA-6rrx-cv9w-48f8

OS command injection in NEC Corporation Aterm W300P

Priority LOW 34

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01399 Published 2019-01-09 No fix listed CWE-78
TI-2018-00585 CVE-2018-0630 · GHSA-pjjj-3fqx-4mxr

OS command injection in NEC Corporation Aterm W300P

Priority LOW 34

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01399 Published 2019-01-09 No fix listed CWE-78
TI-2018-00584 CVE-2018-0629 · GHSA-74vv-ghcg-cv4g

OS command injection in NEC Corporation Aterm W300P

Priority LOW 34

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01399 Published 2019-01-09 No fix listed CWE-78