PT-2025-3848 · Nec · Aterm Gb1200Pe+7

Kakeru Kajihara + 2 · Published 2025-01-15 · Updated 2025-01-21 · CVE-2025-0355

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG2600HS versions 1.7.2 and earlier NEC Corporation Aterm WF1200CRS versions 1.6.0 and earlier NEC Corporation Aterm WG1200CRS versions 1.5.0 and earlier NEC Corporation Aterm GB1200PE versions 1.3.0 and earlier NEC Corporation Aterm WG2600HP4 versions 1.4.2 and earlier NEC Corporation Aterm WG2600HM4 versions 1.4.2 and earlier NEC Corporation Aterm WG2600HS2 versions 1.3.2 and earlier NEC Corporation Aterm WX3000HP versions 2.4.2 and earlier NEC Corporation Aterm WX4200D5 versions 1.2.4 and earlier

Description The issue allows an attacker to obtain a Wi-Fi password via the network due to missing authentication for a critical function.

Recommendations For NEC Corporation Aterm WG2600HS versions 1.7.2 and earlier, update to a version later than 1.7.2. For NEC Corporation Aterm WF1200CRS versions 1.6.0 and earlier, update to a version later than 1.6.0. For NEC Corporation Aterm WG1200CRS versions 1.5.0 and earlier, update to a version later than 1.5.0. For NEC Corporation Aterm GB1200PE versions 1.3.0 and earlier, update to a version later than 1.3.0. For NEC Corporation Aterm WG2600HP4 versions 1.4.2 and earlier, update to a version later than 1.4.2. For NEC Corporation Aterm WG2600HM4 versions 1.4.2 and earlier, update to a version later than 1.4.2. For NEC Corporation Aterm WG2600HS2 versions 1.3.2 and earlier, update to a version later than 1.3.2. For NEC Corporation Aterm WX3000HP versions 2.4.2 and earlier, update to a version later than 2.4.2. For NEC Corporation Aterm WX4200D5 versions 1.2.4 and earlier, update to a version later than 1.2.4.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-0355

Affected Products

Aterm Gb1200Pe

Aterm Wf1200Cr

Aterm Wg1200Cr

Aterm Wg2600Hm4

Aterm Wg2600Hs

Aterm Wg2600Hp2

Aterm Wx3000Hp

Aterm Wx4200D5

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-0355 · Security Note
• https://t.me/cvedetector/15411 · Telegram Post
• https://t.me/cvenotify/107957 · Telegram Post
• https://twitter.com/CVEnew/status/1879490161215717681 · Twitter Post
• https://jpn.nec.com/security-info/secinfo/nv25-003_en.html · Note
• https://t.me/cvenotify/107433 · Telegram Post