Към съдържанието
Търсене

CVE-2024-28015: NEC Corporation WG1800HP4, инжекция

9.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary OS command with the root privilege via the internet.

Засегнати продукти

  • NEC Corporation WG1800HP4: all versions
  • NEC Corporation WG1200HS3: all versions
  • NEC Corporation WG1900HP2: all versions
  • NEC Corporation WG1200HP3: all versions
  • NEC Corporation WG1800HP3: all versions
  • NEC Corporation WG1200HS2: all versions
  • NEC Corporation WG1900HP: all versions
  • NEC Corporation WG1200HP2: all versions
  • NEC Corporation W1200EX(-MS): all versions
  • NEC Corporation WG1200HS: all versions
  • NEC Corporation WG1200HP: all versions
  • NEC Corporation WF300HP2: all versions
  • NEC Corporation W300P: all versions
  • NEC Corporation WF800HP: all versions
  • NEC Corporation WR8165N: all versions
  • NEC Corporation WG2200HP: all versions
  • NEC Corporation WF1200HP2: all versions
  • NEC Corporation WG1800HP2: all versions
  • NEC Corporation WF1200HP: all versions
  • NEC Corporation WG600HP: all versions
  • NEC Corporation WG300HP: all versions
  • NEC Corporation WF300HP: all versions
  • NEC Corporation WG1800HP: all versions
  • NEC Corporation WG1400HP: all versions
  • NEC Corporation WR8175N: all versions
  • NEC Corporation WR9300N: all versions
  • NEC Corporation WR8750N: all versions
  • NEC Corporation WR8160N: all versions
  • NEC Corporation WR9500N: all versions
  • NEC Corporation WR8600N: all versions
  • NEC Corporation WR8370N: all versions
  • NEC Corporation WR8170N: all versions
  • NEC Corporation WR8700N: all versions
  • NEC Corporation WR8300N: all versions
  • NEC Corporation WR8150N: all versions
  • NEC Corporation WR4100N: all versions
  • NEC Corporation WR4500N: all versions
  • NEC Corporation WR8100N: all versions
  • NEC Corporation WR8500N: all versions
  • NEC Corporation CR2500P: all versions
  • NEC Corporation WR8400N: all versions
  • NEC Corporation WR8200N: all versions
  • NEC Corporation WR1200H: all versions
  • NEC Corporation WR7870S: all versions
  • NEC Corporation WR6670S: all versions
  • NEC Corporation WR7850S: all versions
  • NEC Corporation WR6650S: all versions
  • NEC Corporation WR6600H: all versions
  • NEC Corporation WR7800H: all versions
  • NEC Corporation WM3400RN: all versions
  • NEC Corporation WM3450RN: all versions
  • NEC Corporation WM3500R: all versions
  • NEC Corporation WM3600R: all versions
  • NEC Corporation WM3800R: all versions
  • NEC Corporation WR8166N: all versions
  • NEC Corporation MR01LN: all versions
  • NEC Corporation MR02LN: all versions
  • NEC Corporation WG1810HP(JE): all versions
  • NEC Corporation WG1810HP(MF): all versions
  • nec aterm_wg1800hp4_firmware: всички версии

Вид слабост

История

  • 28 март 2024 Публикувано

Други уязвимости в NEC Corporation WG1800HP4

Първоизточници

CVE-2024-28015: NEC Corporation WG1800HP4, инжекция | freedomonline.bg