Aterm Wg1800Hp4 Firmware CVE-2024-28016

MEDIUM

Improper Access Control (CWE-284)

2024-03-28 psirt-info@cyber.jp.nec.com

Authentication Bypass Aterm Wg1800Hp4 Firmware Aterm Wg1200Hs3 Firmware Aterm Wg1900Hp2 Firmware Aterm Wg1200Hp3 Firmware Aterm Wg1800Hp3 Firmware Aterm Wg1200Hs2 Firmware Aterm Wg1900Hp Firmware Aterm Wg1200Hp2 Firmware Aterm W1200Ex Ms Firmware Aterm Wg1200Hs Firmware Aterm Wg1200Hp Firmware Aterm Wf300Hp2 Firmware Aterm W300P Firmware Aterm Wf800Hp Firmware Aterm Wr8165N Firmware Aterm Wg2200Hp Firmware Aterm Wf1200Hp2 Firmware Aterm Wg1800Hp2 Firmware Aterm Wf1200Hp Firmware Aterm Wg600Hp Firmware Aterm Wg300Hp Firmware Aterm Wf300Hp Firmware Aterm Wg1800Hp Firmware Aterm Wg1400Hp Firmware Aterm Wr8175N Firmware Aterm Wr9300N Firmware Aterm Wr8750N Firmware Aterm Wr8160N Firmware Aterm Wr9500N Firmware Aterm Wr8600N Firmware Aterm Wr8370N Firmware Aterm Wr8170N Firmware Aterm Wr8700N Firmware Aterm Wr8300N Firmware Aterm Wr8150N Firmware Aterm Wr4100N Firmware Aterm Wr4500N Firmware Aterm Wr8100N Firmware Aterm Wr8500N Firmware Aterm Cr2500P Firmware Aterm Wr8400N Firmware Aterm Wr8200N Firmware Aterm Wr1200H Firmware Aterm Wr7870S Firmware Aterm Wr6670S Firmware Aterm Wr7850S Firmware Aterm Wr6650S Firmware Aterm Wr6600H Firmware Aterm Wr7800H Firmware Aterm Wm3400Rn Firmware Aterm Wm3450Rn Firmware Aterm Wm3500R Firmware Aterm Wm3600R Firmware Aterm Wm3800R Firmware Aterm Wr8166N Firmware Aterm Mr01Ln Firmware Aterm Mr02Ln Firmware Aterm Wg1810Hp Je Firmware Aterm Wg1810Hp Mf Firmware

6.0

CVSS 3.1 · Vendor: cyber

Share

Severity by source

Vendor (cyber) PRIMARY

6.0 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

Primary rating from Vendor (cyber) · only source for this CVE.

CVSS VectorVendor: cyber

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

1

CVE Published

Mar 28, 2024 - 01:15 cve.org

MEDIUM 6.0

DescriptionCVE.org

Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to get device informations via the internet.

AnalysisAI

Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P,. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to get device informations via the internet. Affected products include: Nec Aterm Wg1800Hp4 Firmware, Nec Aterm Wg1200Hs3 Firmware, Nec Aterm Wg1900Hp2 Firmware, Nec Aterm Wg1200Hp3 Firmware, Nec Aterm Wg1800Hp3 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Aterm Wg1800Hp4 Firmware

View all

CVE-2024-28015 CRITICAL Act Now

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG12

CVE-2024-28014 CRITICAL Act Now

Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3

CVE-2024-28012 CRITICAL Act Now

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG

CVE-2024-28011 CRITICAL Act Now

Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG120

CVE-2024-28010 CRITICAL Act Now

Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG

CVE-2024-28009 CRITICAL Act Now

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG

CVE-2024-28008 CRITICAL Act Now

Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, W

CVE-2024-28007 CRITICAL Act Now

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG

CVE-2021-20680 MEDIUM This Month

Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP

CVE-2024-28013 MEDIUM This Month

Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, W

CVE-2024-28006 MEDIUM This Month

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG

CVE-2024-28005 MEDIUM This Month

Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1

Same weakness CWE-284 – Improper Access Control

View all

CVE-2012-4681 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2012-5076 CRITICAL POC

CVE-2014-3120 HIGH POC

CVE-2013-2423 LOW POC

CVE-2016-3427 CRITICAL

CVE-2025-12480 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2024-28016 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy