What’s Vulnerable › Vulnerabilities

CVE-2023-3332

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-28 · updated 2026-06-17
• Weakness: CWE-79

Description

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to  execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.

Affected products

• NEC Aterm Wf300Hp Firmware: all versions
• NEC Aterm Wg1400Hp Firmware: all versions
• NEC Aterm Wg1800Hp2 Firmware: all versions
• NEC Aterm Wg1800Hp Firmware: all versions
• NEC Aterm Wg2200Hp Firmware: all versions
• NEC Aterm Wg2600Hp2 Firmware: all versions
• NEC Aterm Wg2600Hp Firmware: all versions
• NEC Aterm Wg300Hp Firmware: all versions
• NEC Aterm Wg600Hp Firmware: all versions
• NEC Aterm Wr8170N Firmware: all versions
• NEC Aterm Wr8175N Firmware: all versions
• NEC Aterm Wr8370N Firmware: all versions
• NEC Aterm Wr8600N Firmware: all versions
• NEC Aterm Wr8700N Firmware: all versions
• NEC Aterm Wr8750N Firmware: all versions
• NEC Aterm Wr9300N Firmware: all versions
• NEC Aterm Wr9500N Firmware: all versions

References

• https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html
• https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html

Get alerted when CVE-2023-3332 or the next vulnerability affects your stack