PT-2025-3848 · Nec · Aterm Gb1200Pe+7

Kakeru Kajihara + 2 · Publicado 2025-01-15 · Atualizado 2025-01-21 · CVE-2025-0355

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG2600HS versions 1.7.2 and earlier NEC Corporation Aterm WF1200CRS versions 1.6.0 and earlier NEC Corporation Aterm WG1200CRS versions 1.5.0 and earlier NEC Corporation Aterm GB1200PE versions 1.3.0 and earlier NEC Corporation Aterm WG2600HP4 versions 1.4.2 and earlier NEC Corporation Aterm WG2600HM4 versions 1.4.2 and earlier NEC Corporation Aterm WG2600HS2 versions 1.3.2 and earlier NEC Corporation Aterm WX3000HP versions 2.4.2 and earlier NEC Corporation Aterm WX4200D5 versions 1.2.4 and earlier

Description The issue allows an attacker to obtain a Wi-Fi password via the network due to missing authentication for a critical function.

Recommendations For NEC Corporation Aterm WG2600HS versions 1.7.2 and earlier, update to a version later than 1.7.2. For NEC Corporation Aterm WF1200CRS versions 1.6.0 and earlier, update to a version later than 1.6.0. For NEC Corporation Aterm WG1200CRS versions 1.5.0 and earlier, update to a version later than 1.5.0. For NEC Corporation Aterm GB1200PE versions 1.3.0 and earlier, update to a version later than 1.3.0. For NEC Corporation Aterm WG2600HP4 versions 1.4.2 and earlier, update to a version later than 1.4.2. For NEC Corporation Aterm WG2600HM4 versions 1.4.2 and earlier, update to a version later than 1.4.2. For NEC Corporation Aterm WG2600HS2 versions 1.3.2 and earlier, update to a version later than 1.3.2. For NEC Corporation Aterm WX3000HP versions 2.4.2 and earlier, update to a version later than 2.4.2. For NEC Corporation Aterm WX4200D5 versions 1.2.4 and earlier, update to a version later than 1.2.4.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2025-0355

Produtos afetados

Aterm Gb1200Pe

Aterm Wf1200Cr

Aterm Wg1200Cr

Aterm Wg2600Hm4

Aterm Wg2600Hs

Aterm Wg2600Hp2

Aterm Wx3000Hp

Aterm Wx4200D5

Referências · 6

• https://t.me/cvedetector/15411 · Publicação no Telegram
• https://t.me/cvenotify/107957 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1879490161215717681 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-0355 · Nota de Segurança
• https://jpn.nec.com/security-info/secinfo/nv25-003_en.html · Nota
• https://t.me/cvenotify/107433 · Publicação no Telegram