Aterm Wg1200Hs2 Firmware CVE-2024-28005

MEDIUM

Execution with Unnecessary Privileges (CWE-250)

2024-03-28 psirt-info@cyber.jp.nec.com

Privilege Escalation Aterm Wg1200Hs2 Firmware Aterm Wg1900Hp Firmware Aterm Wg1200Hp2 Firmware Aterm W1200Ex Ms Firmware Aterm Wg1200Hs Firmware Aterm Wg1200Hp Firmware Aterm Wf300Hp2 Firmware Aterm W300P Firmware Aterm Wf800Hp Firmware Aterm Wr8165N Firmware Aterm Wg2200Hp Firmware Aterm Wf1200Hp2 Firmware Aterm Wg1800Hp2 Firmware Aterm Wf1200Hp Firmware Aterm Wg600Hp Firmware Aterm Wg300Hp Firmware Aterm Wf300Hp Firmware Aterm Wg1800Hp Firmware Aterm Wg1400Hp Firmware Aterm Wr8175N Firmware Aterm Wr9300N Firmware Aterm Wr8750N Firmware Aterm Wr8160N Firmware Aterm Wr9500N Firmware Aterm Wr8600N Firmware Aterm Wr8370N Firmware Aterm Wr8170N Firmware Aterm Wr8700N Firmware Aterm Wr8300N Firmware Aterm Wr8150N Firmware Aterm Wr4100N Firmware Aterm Wr4500N Firmware Aterm Wr8100N Firmware Aterm Wr8500N Firmware Aterm Cr2500P Firmware Aterm Wr8400N Firmware Aterm Wr8200N Firmware Aterm Wr1200H Firmware Aterm Wr7870S Firmware Aterm Wr6670S Firmware Aterm Wg1800Hp4 Firmware Aterm Wg1200Hs3 Firmware Aterm Wg1900Hp2 Firmware Aterm Wg1200Hp3 Firmware Aterm Wg1800Hp3 Firmware Aterm Wr7850S Firmware Aterm Wr6650S Firmware Aterm Wr6600H Firmware Aterm Wr7800H Firmware Aterm Wm3400Rn Firmware Aterm Wm3450Rn Firmware Aterm Wm3500R Firmware Aterm Wm3600R Firmware Aterm Wm3800R Firmware Aterm Wr8166N Firmware Aterm Mr01Ln Firmware Aterm Mr02Ln Firmware Aterm Wg1810Hp Je Firmware Aterm Wg1810Hp Mf Firmware

4.7

CVSS 3.1 · Vendor: cyber

Share

Severity by source

Vendor (cyber) PRIMARY

4.7 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Primary rating from Vendor (cyber) · only source for this CVE.

CVSS VectorVendor: cyber

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

1

CVE Published

Mar 28, 2024 - 01:15 cve.org

MEDIUM 4.7

DescriptionCVE.org

Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker who has obtained high privileges can execute arbitrary scripts.

AnalysisAI

Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2,. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-250. Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker who has obtained high privileges can execute arbitrary scripts. Affected products include: Nec Aterm Wg1200Hs2 Firmware, Nec Aterm Wg1900Hp Firmware, Nec Aterm Wg1200Hp2 Firmware, Nec Aterm W1200Ex-Ms Firmware, Nec Aterm Wg1200Hs Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Aterm Wg1200Hs2 Firmware

View all

CVE-2024-28015 CRITICAL Act Now

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG12

CVE-2024-28014 CRITICAL Act Now

Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3

CVE-2024-28012 CRITICAL Act Now

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG

CVE-2024-28011 CRITICAL Act Now

Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG120

CVE-2024-28010 CRITICAL Act Now

Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG

CVE-2024-28009 CRITICAL Act Now

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG

CVE-2024-28008 CRITICAL Act Now

Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, W

CVE-2024-28007 CRITICAL Act Now

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG

CVE-2021-20680 MEDIUM This Month

Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP

CVE-2024-28016 MEDIUM This Month

Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1

CVE-2024-28013 MEDIUM This Month

Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, W

CVE-2024-28006 MEDIUM This Month

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG

Same weakness CWE-250 – Execution with Unnecessary Privileges

View all

CVE-2023-52030 CRITICAL POC

CVE-2025-57119 CRITICAL POC

CVE-2024-25421 CRITICAL POC

CVE-2023-46360 HIGH POC

CVE-2024-6913 CRITICAL POC

CVE-2022-1808 HIGH POC

CVE-2022-0071 HIGH POC

CVE-2022-0070 HIGH POC

Same technique Privilege Escalation

View all

CVE-2025-47812 CRITICAL POC

CVE-2013-0422 CRITICAL POC

CVE-2013-0632 CRITICAL POC

CVE-2017-5689 CRITICAL POC

CVE-2017-12635 CRITICAL POC

CVE-2016-10372 CRITICAL POC

CVE-2014-9583 CRITICAL POC

CVE-2012-0297 CRITICAL POC

Share

CVE-2024-28005 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy