CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2023-3332
Medium (4.8) in nec. EPSS 0.3% chance of exploitation in the next 30 days.
Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to
execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nec:aterm_wf300hp_firmware
- nec:aterm_wg1400hp_firmware
- nec:aterm_wg1800hp2_firmware
- nec:aterm_wg1800hp_firmware
- nec:aterm_wg2200hp_firmware
- nec:aterm_wg2600hp2_firmware
- nec:aterm_wg2600hp_firmware
- nec:aterm_wg300hp_firmware
- nec:aterm_wg600hp_firmware
- nec:aterm_wr8170n_firmware
- nec:aterm_wr8175n_firmware
- nec:aterm_wr8370n_firmware
- nec:aterm_wr8600n_firmware
- nec:aterm_wr8700n_firmware
- nec:aterm_wr8750n_firmware
- nec:aterm_wr9300n_firmware
- nec:aterm_wr9500n_firmware