CVE-2024-28016

Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to get device informations via the internet.

Score

CVSS 3.1 6.0 Medium

Status

Analyzed - psirt-info@cyber.jp.nec.com

Published

2024-03-28

Last modified

2025-01-14

Weaknesses

CWE-284

Affected products

• Aterm Cr2500p Firmware (Nec)
• Aterm Mr01ln Firmware (Nec)
• Aterm Mr02ln Firmware (Nec)
• Aterm W1200ex-ms Firmware (Nec)
• Aterm W300p Firmware (Nec)
• Aterm Wf1200hp2 Firmware (Nec)
• Aterm Wf1200hp Firmware (Nec)
• Aterm Wf300hp2 Firmware (Nec)
• Aterm Wf300hp Firmware (Nec)
• Aterm Wf800hp Firmware (Nec)
• Aterm Wg1200hp2 Firmware (Nec)
• Aterm Wg1200hp3 Firmware (Nec)
• Aterm Wg1200hp Firmware (Nec)
• Aterm Wg1200hs2 Firmware (Nec)
• Aterm Wg1200hs3 Firmware (Nec)
• Aterm Wg1200hs Firmware (Nec)
• Aterm Wg1400hp Firmware (Nec)
• Aterm Wg1800hp2 Firmware (Nec)
• Aterm Wg1800hp3 Firmware (Nec)
• Aterm Wg1800hp4 Firmware (Nec)
• Aterm Wg1800hp Firmware (Nec)
• Aterm Wg1810hp(je) Firmware (Nec)
• Aterm Wg1810hp(mf) Firmware (Nec)
• Aterm Wg1900hp2 Firmware (Nec)
• Aterm Wg1900hp Firmware (Nec)
• Aterm Wg2200hp Firmware (Nec)
• Aterm Wg300hp Firmware (Nec)
• Aterm Wg600hp Firmware (Nec)
• Aterm Wm3400rn Firmware (Nec)
• Aterm Wm3450rn Firmware (Nec)
• Aterm Wm3500r Firmware (Nec)
• Aterm Wm3600r Firmware (Nec)
• Aterm Wm3800r Firmware (Nec)
• Aterm Wr1200h Firmware (Nec)
• Aterm Wr4100n Firmware (Nec)
• Aterm Wr4500n Firmware (Nec)
• Aterm Wr6600h Firmware (Nec)
• Aterm Wr6650s Firmware (Nec)
• Aterm Wr6670s Firmware (Nec)
• Aterm Wr7800h Firmware (Nec)
• Aterm Wr7850s Firmware (Nec)
• Aterm Wr7870s Firmware (Nec)
• Aterm Wr8100n Firmware (Nec)
• Aterm Wr8150n Firmware (Nec)
• Aterm Wr8160n Firmware (Nec)
• Aterm Wr8165n Firmware (Nec)
• Aterm Wr8166n Firmware (Nec)
• Aterm Wr8170n Firmware (Nec)
• Aterm Wr8175n Firmware (Nec)
• Aterm Wr8200n Firmware (Nec)
• Aterm Wr8300n Firmware (Nec)
• Aterm Wr8370n Firmware (Nec)
• Aterm Wr8400n Firmware (Nec)
• Aterm Wr8500n Firmware (Nec)
• Aterm Wr8600n Firmware (Nec)
• Aterm Wr8700n Firmware (Nec)
• Aterm Wr8750n Firmware (Nec)
• Aterm Wr9300n Firmware (Nec)
• Aterm Wr9500n Firmware (Nec)
• Cr2500p (Nec Corporation)
• Mr01ln (Nec Corporation)
• Mr02ln (Nec Corporation)
• W1200ex-ms (Nec Corporation)
• W300p (Nec Corporation)
• Wf1200hp (Nec Corporation)
• Wf1200hp2 (Nec Corporation)
• Wf300hp (Nec Corporation)
• Wf300hp2 (Nec Corporation)
• Wf800hp (Nec Corporation)
• Wg1200hp (Nec Corporation)
• Wg1200hp2 (Nec Corporation)
• Wg1200hp3 (Nec Corporation)
• Wg1200hs (Nec Corporation)
• Wg1200hs2 (Nec Corporation)
• Wg1200hs3 (Nec Corporation)
• Wg1400hp (Nec Corporation)
• Wg1800hp (Nec Corporation)
• Wg1800hp2 (Nec Corporation)
• Wg1800hp3 (Nec Corporation)
• Wg1800hp4 (Nec Corporation)
• Wg1810hpje (Nec Corporation)
• Wg1810hpmf (Nec Corporation)
• Wg1900hp (Nec Corporation)
• Wg1900hp2 (Nec Corporation)
• Wg2200hp (Nec Corporation)
• Wg300hp (Nec Corporation)
• Wg600hp (Nec Corporation)
• Wm3400rn (Nec Corporation)
• Wm3450rn (Nec Corporation)
• Wm3500r (Nec Corporation)
• Wm3600r (Nec Corporation)
• Wm3800r (Nec Corporation)
• Wr1200h (Nec Corporation)
• Wr4100n (Nec Corporation)
• Wr4500n (Nec Corporation)
• Wr6600h (Nec Corporation)
• Wr6650s (Nec Corporation)
• Wr6670s (Nec Corporation)
• Wr7800h (Nec Corporation)
• Wr7850s (Nec Corporation)

References

• https://jpn.nec.com/security-info/secinfo/nv24-001_en.html
• https://https://jpn.nec.com/security-info/secinfo/nv24-001_en.html