What’s Vulnerable › Vulnerabilities

CVE-2024-28014

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-28 · updated 2026-06-17
• Weakness: CWE-121

Description

Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command via the internet.

Affected products

• NEC Aterm Cr2500P Firmware: all versions
• NEC Aterm Mr01Ln Firmware: all versions
• NEC Aterm Mr02Ln Firmware: all versions
• NEC Aterm W1200Ex-Ms Firmware: all versions
• NEC Corporation Aterm W300P: all versions
• NEC Aterm Wf1200Hp2 Firmware: all versions
• NEC Aterm Wf1200Hp Firmware: all versions
• NEC Aterm Wf300Hp2 Firmware: all versions
• NEC Aterm Wf300Hp Firmware: all versions
• NEC Aterm Wf800Hp Firmware: all versions
• NEC Aterm Wg1200Hp2 Firmware: all versions
• NEC Aterm Wg1200Hp3 Firmware: all versions
• NEC Corporation WG1200HP: all versions
• NEC Aterm Wg1200Hs2 Firmware: all versions
• NEC Aterm Wg1200Hs3 Firmware: all versions
• NEC Aterm Wg1200Hs Firmware: all versions
• NEC Aterm Wg1400Hp Firmware: all versions
• NEC Aterm Wg1800Hp2 Firmware: all versions
• NEC Aterm Wg1800Hp3 Firmware: all versions
• NEC Aterm Wg1800Hp4 Firmware: all versions
• NEC Aterm Wg1800Hp Firmware: all versions
• NEC Aterm Wg1810Hp(Je) Firmware: all versions
• NEC Aterm Wg1810Hp(Mf) Firmware: all versions
• NEC Aterm Wg1900Hp2 Firmware: all versions
• NEC Aterm Wg1900Hp Firmware: all versions
• NEC Aterm Wg2200Hp Firmware: all versions
• NEC Aterm Wg300Hp Firmware: all versions
• NEC Aterm Wg600Hp Firmware: all versions
• NEC Aterm Wm3400Rn Firmware: all versions
• NEC Aterm Wm3450Rn Firmware: all versions

References

• https://jpn.nec.com/security-info/secinfo/nv24-001_en.html
• https://https://jpn.nec.com/security-info/secinfo/nv24-001_en.html

Get alerted when CVE-2024-28014 or the next vulnerability affects your stack