CVE-2023-3330
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.
- Score
- CVSS 3.1 4.3 Medium
- Status
- Modified - psirt-info@cyber.jp.nec.com
- Published
- 2023-06-28
- Last modified
- 2024-12-04
- Weaknesses
- CWE-22
Affected products
- Aterm Wf300hp Firmware (Nec)
- Aterm Wg1400hp Firmware (Nec)
- Aterm Wg1800hp2 Firmware (Nec)
- Aterm Wg1800hp Firmware (Nec)
- Aterm Wg2200hp Firmware (Nec)
- Aterm Wg2600hp2 Firmware (Nec)
- Aterm Wg2600hp Firmware (Nec)
- Aterm Wg300hp Firmware (Nec)
- Aterm Wg600hp Firmware (Nec)
- Aterm Wr8170n Firmware (Nec)
- Aterm Wr8175n Firmware (Nec)
- Aterm Wr8370n Firmware (Nec)
- Aterm Wr8600n Firmware (Nec)
- Aterm Wr8700n Firmware (Nec)
- Aterm Wr8750n Firmware (Nec)
- Aterm Wr9300n Firmware (Nec)
- Aterm Wr9500n Firmware (Nec)
- Aterm Wf300hp (Nec Corporation)
- Aterm Wg1400hp (Nec Corporation)
- Aterm Wg1800hp (Nec Corporation)
- Aterm Wg1800hp2 (Nec Corporation)
- Aterm Wg2200hp (Nec Corporation)
- Aterm Wg2600hp (Nec Corporation)
- Aterm Wg2600hp2 (Nec Corporation)
- Aterm Wg300hp (Nec Corporation)
- Aterm Wg600hp (Nec Corporation)
- Aterm Wr8170n (Nec Corporation)
- Aterm Wr8175n (Nec Corporation)
- Aterm Wr8370n (Nec Corporation)
- Aterm Wr8600n (Nec Corporation)
- Aterm Wr8700n (Nec Corporation)
- Aterm Wr8750n (Nec Corporation)
- Aterm Wr9300n (Nec Corporation)
- Aterm Wr9500n (Nec Corporation)
References
- https://jpn.nec.com/security-info/secinfo/nv23-007_en.html
