high7.2
CVE-2023-3333
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG…
Impact
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nec | Aterm Wf300hp Firmware | All versions |
| Nec | Aterm Wg1400hp Firmware | All versions |
| Nec | Aterm Wg1800hp Firmware | All versions |
| Nec | Aterm Wg1800hp2 Firmware | All versions |
| Nec | Aterm Wg2200hp Firmware | All versions |
| Nec | Aterm Wg2600hp Firmware | All versions |
| Nec | Aterm Wg2600hp2 Firmware | All versions |
| Nec | Aterm Wg300hp Firmware | All versions |
| Nec | Aterm Wg600hp Firmware | All versions |
| Nec | Aterm Wr8600n Firmware | All versions |
| Nec | Aterm Wr8700n Firmware | All versions |
| Nec | Aterm Wr8750n Firmware | All versions |