Log in Start free

Vulnerability · Published Mar 28, 2024 · Assigned by NEC

CVE-2024-28005

Medium 4.7

In plain English

A medium-severity code injection in CR2500P from NEC Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).

Severity (CVSS 3.1)4.7Medium
Exploit odds (30 days)0.5%top 58.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker who has obtained high privileges can execute arbitrary scripts.

Affected products (as reported)

VendorProductVersions
NEC Corporation WG1800HP4 all versions
NEC Corporation WG1200HS3 all versions
NEC Corporation WG1900HP2 all versions
NEC Corporation WG1200HP3 all versions
NEC Corporation WG1800HP3 all versions
NEC Corporation WG1200HS2 all versions
NEC Corporation WG1900HP all versions
NEC Corporation WG1200HP2 all versions
NEC Corporation W1200EX(-MS) all versions
NEC Corporation WG1200HS all versions
NEC Corporation WG1200HP all versions
NEC Corporation WF300HP2 all versions
NEC Corporation W300P all versions
NEC Corporation WF800HP all versions
NEC Corporation WR8165N all versions
NEC Corporation WG2200HP all versions
NEC Corporation WF1200HP2 all versions
NEC Corporation WG1800HP2 all versions
NEC Corporation WF1200HP all versions
NEC Corporation WG600HP all versions
NEC Corporation WG300HP all versions
NEC Corporation WF300HP all versions
NEC Corporation WG1800HP all versions
NEC Corporation WG1400HP all versions
NEC Corporation WR8175N all versions
NEC Corporation WR9300N all versions
NEC Corporation WR8750N all versions
NEC Corporation WR8160N all versions
NEC Corporation WR9500N all versions
NEC Corporation WR8600N all versions

Weakness: CWE-250, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

References