Description
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NEC | Aterm WG2600HP2 | all versions | — |
| NEC | Aterm WG2600HP | all versions | — |
| NEC | Aterm WG2200HP | all versions | — |
| NEC | Aterm WG1800HP2 | all versions | — |
| NEC | Aterm WG1800HP | all versions | — |
| NEC | Aterm WG1400HP | all versions | — |
| NEC | Aterm WG600HP | all versions | — |
| NEC | Aterm WG300HP | all versions | — |
| NEC | Aterm WF300HP | all versions | — |
| NEC | Aterm WR9500N | all versions | — |
| NEC | Aterm WR9300N | all versions | — |
| NEC | Aterm WR8750N | all versions | — |
| NEC | Aterm WR8700N | all versions | — |
| NEC | Aterm WR8600N | all versions | — |
| NEC | Aterm WR8370N | all versions | — |
| NEC | Aterm WR8175N | all versions | — |
| NEC | Aterm WR8170N | all versions | — |