What’s Vulnerable › Vulnerabilities

CVE-2023-3331

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-28 · updated 2026-06-17
• Weakness: CWE-22

Description

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete specific files in the product.

Affected products

• NEC Aterm Wf300Hp Firmware: all versions
• NEC Aterm Wg1400Hp Firmware: all versions
• NEC Aterm Wg1800Hp2 Firmware: all versions
• NEC Aterm Wg1800Hp Firmware: all versions
• NEC Aterm Wg2200Hp Firmware: all versions
• NEC Aterm Wg2600Hp2 Firmware: all versions
• NEC Aterm Wg2600Hp Firmware: all versions
• NEC Aterm Wg300Hp Firmware: all versions
• NEC Aterm Wg600Hp Firmware: all versions
• NEC Aterm Wr8170N Firmware: all versions
• NEC Aterm Wr8175N Firmware: all versions
• NEC Aterm Wr8370N Firmware: all versions
• NEC Aterm Wr8600N Firmware: all versions
• NEC Aterm Wr8700N Firmware: all versions
• NEC Aterm Wr8750N Firmware: all versions
• NEC Aterm Wr9300N Firmware: all versions
• NEC Aterm Wr9500N Firmware: all versions

References

• https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html
• https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html

Get alerted when CVE-2023-3331 or the next vulnerability affects your stack