Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: NEC Corporation Component: Aterm Wg2600hs Firmware Clear all filters
TI-2021-03938 CVE-2021-20712 · GHSA-c7vp-4m6m-jg9v

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and…

Priority LOW 25

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00801 Published 2021-04-26 No fix listed
TI-2021-03937 CVE-2021-20711 · GHSA-p4fr-76vx-7r7v

OS command injection in NEC Corporation Aterm WG2600HS

Priority MEDIUM 45

Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01359 Published 2021-04-26 No fix listed CWE-78
TI-2021-03935 CVE-2021-20709 · GHSA-fr48-wfw6-fwg7

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware…

Priority LOW 33

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an att…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0066 Published 2021-04-26 No fix listed CWE-354
TI-2021-03934 CVE-2021-20708 · GHSA-w32w-5vr5-g3ph

OS command injection in NEC Aterm devices

Priority LOW 34

NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier) allow authenticated attackers to execute arbitrary OS comma…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01217 Published 2021-04-26 No fix listed CWE-78
TI-2020-04504 CVE-2020-5534 · GHSA-47fx-mr2m-65rq

OS command injection in NEC Corporation Aterm WG2600HS

Priority LOW 36

Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0087 Published 2020-02-21 No fix listed CWE-78
TI-2020-04503 CVE-2020-5533 · GHSA-rhgf-c9m6-xg7c

Cross-site scripting in NEC Corporation Aterm WG2600HS

Priority LOW 29

Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00801 Published 2020-02-21 No fix listed CWE-79
TI-2020-04495 CVE-2020-5525 · GHSA-m46c-jxp2-97p9

OS command injection in NEC Corporation Aterm series

Priority LOW 36

Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same network segment to execu…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0087 Published 2020-02-21 No fix listed CWE-78
TI-2020-04494 CVE-2020-5524 · GHSA-48x3-vgp6-cxw2

OS command injection in NEC Corporation Aterm series

Priority MEDIUM 40

Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment to execute arbitrary O…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01019 Published 2020-02-21 No fix listed CWE-78