CVSS 3.1
5.4 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:LCVE-2023-3331
Medium (5.4) in nec. EPSS 0.5% chance of exploitation in the next 30 days.
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete
specific files in the product.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nec:aterm_wf300hp_firmware
- nec:aterm_wg1400hp_firmware
- nec:aterm_wg1800hp2_firmware
- nec:aterm_wg1800hp_firmware
- nec:aterm_wg2200hp_firmware
- nec:aterm_wg2600hp2_firmware
- nec:aterm_wg2600hp_firmware
- nec:aterm_wg300hp_firmware
- nec:aterm_wg600hp_firmware
- nec:aterm_wr8170n_firmware
- nec:aterm_wr8175n_firmware
- nec:aterm_wr8370n_firmware
- nec:aterm_wr8600n_firmware
- nec:aterm_wr8700n_firmware
- nec:aterm_wr8750n_firmware
- nec:aterm_wr9300n_firmware
- nec:aterm_wr9500n_firmware