CVEvulnerability

CVE-2023-3331

5.4 MEDIUM Published 2023-06-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Weaknesses
CWE-22

Description

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete specific files in the product.

Affected configurations

• nec aterm wf300hp firmware • nec aterm wg1400hp firmware • nec aterm wg1800hp firmware • nec aterm wg1800hp2 firmware • nec aterm wg2200hp firmware • nec aterm wg2600hp firmware • nec aterm wg2600hp2 firmware • nec aterm wg300hp firmware • nec aterm wg600hp firmware • nec aterm wr8600n firmware • nec aterm wr8700n firmware • nec aterm wr8750n firmware • nec aterm wr9300n firmware • nec aterm wr9500n firmware • nec aterm wr8170n firmware • nec aterm wr8175n firmware • nec aterm wr8370n firmware

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References