CVE-2023-3331

· MEDIUMModified

← All CVEs

CVSS v3.1

5.4

EPSS

0.55%

Published

Jun 27, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete specific files in the product.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Weaknesses (CWE)

CWE-22CWE-22

Affected Products (34)

nec · aterm_wf300hp_firmwarevulnerable

nec · aterm_wf300hp

nec · aterm_wg1400hp_firmwarevulnerable

nec · aterm_wg1400hp

nec · aterm_wg1800hp_firmwarevulnerable

nec · aterm_wg1800hp

nec · aterm_wg1800hp2_firmwarevulnerable

nec · aterm_wg1800hp2

References (2)

https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html

Vendor Advisory

https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs