PT-2024-22210 · Nec · Aterm Wg1800Hp2+51

Published

2024-03-27

·

Updated

2025-09-29

·

CVE-2024-28013

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN, MR02LN, WG1810HP(JE), and WG1810HP(MF) all versions
Description The issue allows an attacker to change settings via the internet due to the use of insufficiently random values.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2024-28013

Affected Products

Aterm Cr2500P
Aterm Mr01Ln
Aterm Mr02Ln
Aterm W1200Ex
Aterm W300P
Aterm Wg1200Hp
Aterm Wf1200Hp2
Aterm Wf300Hp2
Aterm Wf800Hp
Aterm Wg1200Hp2
Aterm Wg1200Hp3
Aterm Wg1400Hp
Aterm Wg1800Hp
Aterm Wg1800Hp2
Aterm Wg1800Hp3
Aterm Wg1800Hp4
Aterm Wg1810Hp
Aterm Wg1900Hp
Aterm Wg1900Hp2
Aterm Wg2200Hp
Aterm Wg600Hp
Aterm Wm3400Rn
Aterm Wm3450Rn
Aterm Wm3500R
Aterm Wm3600R
Aterm Wm3800R
Aterm Wr1200H
Aterm Wr4100N
Aterm Wr4500N
Aterm Wr6600H
Aterm Wr6650S
Aterm Wr6670S
Aterm Wr7800H
Aterm Wr7850S
Aterm Wr7870S
Aterm Wr8100N
Aterm Wr8150N
Aterm Wr8160N
Aterm Wr8165N
Aterm Wr8166N
Aterm Wr8170N
Aterm Wr8175N
Aterm Wr8200N
Aterm Wr8300N
Aterm Wr8370N
Aterm Wr8400N
Aterm Wr8500N
Aterm Wr8600N
Aterm Wr8700N
Aterm Wr8750N
Aterm Wr9300N
Aterm Wr9500N