CVE-2023-3333 — NEC Corporation / Aterm WG2600HP2

Description (CNA)

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.

Affected (CNA)

Vendor / product	Versions
NEC Corporation / Aterm WG2600HP2	affected all versions
NEC Corporation / Aterm WG2600HP	affected all versions
NEC Corporation / Aterm WG2200HP	affected all versions
NEC Corporation / Aterm WG2200HP	affected all versions
NEC Corporation / Aterm WG1800HP2	affected all versions
NEC Corporation / Aterm WG1800HP	affected all versions
NEC Corporation / Aterm WG1400HP	affected all versions
NEC Corporation / Aterm WG600HP	affected all versions
NEC Corporation / Aterm WG300HP	affected all versions
NEC Corporation / Aterm WF300HP	affected all versions
NEC Corporation / Aterm WR9500N	affected all versions
NEC Corporation / Aterm WR9300N	affected all versions
NEC Corporation / Aterm WR8750N	affected all versions
NEC Corporation / Aterm WR8700N	affected all versions
NEC Corporation / Aterm WR8600N	affected all versions
NEC Corporation / Aterm WR8370N	affected all versions
NEC Corporation / Aterm WR8175N	affected all versions
NEC Corporation / Aterm WR8170N	affected all versions

CWE

CWE-78

References

https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html

ADP enrichment

CVE

No English description supplied.

https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html

CISA-ADP

No English description supplied.

No references supplied.