Log in Start free

Vulnerability · Published Mar 28, 2024 · Assigned by NEC

CVE-2024-28009

Critical 9.8

In plain English

A critical-severity improper authentication in CR2500P from NEC Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.7%top 48.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command with the root privilege via the internet.

Affected products (as reported)

VendorProductVersions
NEC Corporation WG1800HP4 all versions
NEC Corporation WG1200HS3 all versions
NEC Corporation WG1900HP2 all versions
NEC Corporation WG1200HP3 all versions
NEC Corporation WG1800HP3 all versions
NEC Corporation WG1200HS2 all versions
NEC Corporation WG1900HP all versions
NEC Corporation WG1200HP2 all versions
NEC Corporation W1200EX(-MS) all versions
NEC Corporation WG1200HS all versions
NEC Corporation WG1200HP all versions
NEC Corporation WF300HP2 all versions
NEC Corporation W300P all versions
NEC Corporation WF800HP all versions
NEC Corporation WR8165N all versions
NEC Corporation WG2200HP all versions
NEC Corporation WF1200HP2 all versions
NEC Corporation WG1800HP2 all versions
NEC Corporation WF1200HP all versions
NEC Corporation WG600HP all versions
NEC Corporation WG300HP all versions
NEC Corporation WF300HP all versions
NEC Corporation WG1800HP all versions
NEC Corporation WG1400HP all versions
NEC Corporation WR8175N all versions
NEC Corporation WR9300N all versions
NEC Corporation WR8750N all versions
NEC Corporation WR8160N all versions
NEC Corporation WR9500N all versions
NEC Corporation WR8600N all versions

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References