Improper Authentication Flaw in NEC Corporation Aterm Wireless Routers

CVE-2024-28012

What is CVE-2024-28012?

A vulnerability exists in various Aterm wireless routers from NEC Corporation that allows remote attackers to execute arbitrary commands with root privileges. This is due to an improper authentication flaw in the affected devices, enabling unauthorized access via the internet. Affected devices include a wide range of models, and users are strongly advised to implement the recommended security updates from NEC to mitigate any potential risks associated with this vulnerability.

References