9.8
Critical
CVE-2024-28010 Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2,…
Description
Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary OS command via the internet.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| aterm_wg1800hp4_firmware | Versions not published | |
| WG1800HP4 | Versions not published | |
| WG1200HS3 | Versions not published | |
| WG1900HP2 | Versions not published | |
| WG1200HP3 | Versions not published | |
| WG1800HP3 | Versions not published | |
| WG1200HS2 | Versions not published | |
| WG1900HP | Versions not published | |
| WG1200HP2 | Versions not published |
Show the 51 other branches Hide the 51 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| W1200EX(-MS) | Versions not published | |
| WG1200HS | Versions not published | |
| WG1200HP | Versions not published | |
| WF300HP2 | Versions not published | |
| W300P | Versions not published | |
| WF800HP | Versions not published | |
| WR8165N | Versions not published | |
| WG2200HP | Versions not published | |
| WF1200HP2 | Versions not published | |
| WG1800HP2 | Versions not published | |
| WF1200HP | Versions not published | |
| WG600HP | Versions not published | |
| WG300HP | Versions not published | |
| WF300HP | Versions not published | |
| WG1800HP | Versions not published | |
| WG1400HP | Versions not published | |
| WR8175N | Versions not published | |
| WR9300N | Versions not published | |
| WR8750N | Versions not published | |
| WR8160N | Versions not published | |
| WR9500N | Versions not published | |
| WR8600N | Versions not published | |
| WR8370N | Versions not published | |
| WR8170N | Versions not published | |
| WR8700N | Versions not published | |
| WR8300N | Versions not published | |
| WR8150N | Versions not published | |
| WR4100N | Versions not published | |
| WR4500N | Versions not published | |
| WR8100N | Versions not published | |
| WR8500N | Versions not published | |
| CR2500P | Versions not published | |
| WR8400N | Versions not published | |
| WR8200N | Versions not published | |
| WR1200H | Versions not published | |
| WR7870S | Versions not published | |
| WR6670S | Versions not published | |
| WR7850S | Versions not published | |
| WR6650S | Versions not published | |
| WR6600H | Versions not published | |
| WR7800H | Versions not published | |
| WM3400RN | Versions not published | |
| WM3450RN | Versions not published | |
| WM3500R | Versions not published | |
| WM3600R | Versions not published | |
| WM3800R | Versions not published | |
| WR8166N | Versions not published | |
| MR01LN | Versions not published | |
| MR02LN | Versions not published | |
| WG1810HP(JE) | Versions not published | |
| WG1810HP(MF) | Versions not published |
Other CVEs of aterm_wg1800hp4_firmware
The 4 CVEs of aterm_wg1800hp4_firmware →
CVE-2024-28015
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4,…
9.8
Critical
CVE-2024-28008
Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP,…
9.8
Critical
CVE-2024-28007
Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3,…
9.8
Critical