Remote Command Execution Vulnerability in NEC Aterm Routers
CVE-2025-0356

7.2HIGH

Key Information:

Vendor

Nec Corporation

Status
Wx1500HP
Wx3600HP
Vendor
CVE Published:
15 January 2025

What is CVE-2025-0356?

NEC Corporation's Aterm WX1500HP and WX3600HP routers are susceptible to a remote command execution vulnerability. This flaw allows attackers to execute arbitrary operating system commands by sending crafted requests over the internet, potentially compromising device integrity and security. Users of version 1.4.2 and earlier for the WX1500HP and version 1.5.3 and earlier for the WX3600HP are at risk and should apply necessary patches immediately.

Affected Version(s)

WX1500HP Ver.1.4.2 and earlier

WX3600HP Ver.1.5.3 and earlier

References

https://jpn.nec.com/security-info/secinfo/nv25-003_en.html

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kakeru Kajihara of NTT Security Holdings.
.