CVEvulnerability

CVE-2023-3332

4.8 MEDIUM Published 2023-06-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79

Description

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to  execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.

Affected configurations

• nec aterm wf300hp firmware • nec aterm wg1400hp firmware • nec aterm wg1800hp firmware • nec aterm wg1800hp2 firmware • nec aterm wg2200hp firmware • nec aterm wg2600hp firmware • nec aterm wg2600hp2 firmware • nec aterm wg300hp firmware • nec aterm wg600hp firmware • nec aterm wr8600n firmware • nec aterm wr8700n firmware • nec aterm wr8750n firmware • nec aterm wr9300n firmware • nec aterm wr9500n firmware • nec aterm wr8170n firmware • nec aterm wr8175n firmware • nec aterm wr8370n firmware

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References