Pathname Limitation Flaw in NEC Aterm Devices
CVE-2023-3331

5.4MEDIUM

Key Information:

Vendor

Nec Corporation

Status
Aterm Wg2600HP2
Aterm Wg2600HP
Aterm Wg2200HP
Aterm Wg1800HP2
Vendor
CVE Published:
28 June 2023

What is CVE-2023-3331?

A vulnerability affecting various NEC Aterm models allows an attacker to manipulate interactions with the filesystem. This flaw enables unauthorized file deletion, potentially disrupting the operation of affected devices. Attackers could exploit this vulnerability to access sensitive configurations or data held within the device, posing a significant risk to network integrity. It is essential for users of these devices to implement available security measures to mitigate associated risks.

Affected Version(s)

Aterm WF300HP all versions

Aterm WG1400HP all versions

Aterm WG1800HP all versions

References

https://https://jpn.nec.com/security-info/secinfo/nv23-00...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mr. Taizoh Tsukamoto in Mitsui Bussan Secure Directions, Inc.
.