PT-2023-24291 · Nec · Aterm W300P+31

Published 2023-06-28 · Updated 2023-07-05 · CVE-2023-3332

NVD

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to 

execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-3332

Affected Products

Aterm W300P

Aterm Wg1400Hp

Aterm Wg1800Hp

Aterm Wg1800Hp2

Aterm Wg2200Hp

Aterm Wg2600Hs

Aterm Wg2600Hp2

Aterm Wg600Hp

Aterm Wr8170N

Aterm Wr8175N

Aterm Wr8370N

Aterm Wr8600N

Aterm Wr8700N

Aterm Wr8750N

Aterm Wr9300N

Aterm Wr9500N

Aterm Wf300Hp Firmware

Aterm Wg1400Hp Firmware

Aterm Wg1800Hp2 Firmware

Aterm Wg1800Hp Firmware

Aterm Wg2200Hp Firmware

Aterm Wg2600Hp2 Firmware

Aterm Wg2600Hp Firmware

Aterm Wg600Hp Firmware

Aterm Wr8170N Firmware

Aterm Wr8175N Firmware

Aterm Wr8370N Firmware

Aterm Wr8600N Firmware

Aterm Wr8700N Firmware

Aterm Wr8750N Firmware

Aterm Wr9300N Firmware

Aterm Wr9500N Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-3332 · Security Note
• https://t.me/cvenotify/53691 · Telegram Post
• https://t.me/cibsecurity/65600 · Telegram Post
• https://t.me/cvenotify/53219 · Telegram Post
• https://https//jpn.nec.com/security-info/secinfo/nv23-007_en.html · Note