Log in Start free

Vulnerability · Published Jun 28, 2023 · Assigned by NEC

CVE-2023-3332

Medium 4.8

In plain English

A medium-severity cross-site scripting in Aterm WF300HP from NEC Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS NVD)4.8Medium
Exploit odds (30 days)0.3%top 71.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to  execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.

Affected products (as reported)

VendorProductVersions
NEC Corporation Aterm WG2600HP2 all versions
NEC Corporation Aterm WG2600HP all versions
NEC Corporation Aterm WG2200HP all versions
NEC Corporation Aterm WG2200HP all versions
NEC Corporation Aterm WG1800HP2 all versions
NEC Corporation Aterm WG1800HP all versions
NEC Corporation Aterm WG1400HP all versions
NEC Corporation Aterm WG600HP all versions
NEC Corporation Aterm WG300HP all versions
NEC Corporation Aterm WF300HP all versions
NEC Corporation Aterm WR9500N all versions
NEC Corporation Aterm WR9300N all versions
NEC Corporation Aterm WR8750N all versions
NEC Corporation Aterm WR8700N all versions
NEC Corporation Aterm WR8600N all versions
NEC Corporation Aterm WR8370N all versions
NEC Corporation Aterm WR8175N all versions
NEC Corporation Aterm WR8170N all versions

Weakness: CWE-79

References