medium4.8
CVE-2023-3332
Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG…
Impact
Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nec | Aterm Wf300hp Firmware | All versions |
| Nec | Aterm Wg1400hp Firmware | All versions |
| Nec | Aterm Wg1800hp Firmware | All versions |
| Nec | Aterm Wg1800hp2 Firmware | All versions |
| Nec | Aterm Wg2200hp Firmware | All versions |
| Nec | Aterm Wg2600hp Firmware | All versions |
| Nec | Aterm Wg2600hp2 Firmware | All versions |
| Nec | Aterm Wg300hp Firmware | All versions |
| Nec | Aterm Wg600hp Firmware | All versions |
| Nec | Aterm Wr8600n Firmware | All versions |
| Nec | Aterm Wr8700n Firmware | All versions |
| Nec | Aterm Wr8750n Firmware | All versions |