CVE-2024-28013
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to change settings via the internet.
Uso de vulnerabilidad de valores insuficientemente aleatorios en NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W30 0P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N , WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN y MR02LN, todas las versiones permiten a un atacante cambiar la configuración a través de Internet.
*Credits:
Yudai Morii, Takaya Noma, Takayuki Sasaki and Katsunari Yoshioka of Yokohama National University.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-02-29 CVE Reserved
- 2024-03-28 CVE Published
- 2024-03-28 EPSS Updated
- 2024-11-19 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-330: Use of Insufficiently Random Values
CAPEC
References (1)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| NEC Corporation Search vendor "NEC Corporation" | WG1800HP4 Search vendor "NEC Corporation" for product "WG1800HP4" | <= Search vendor "NEC Corporation" for product "WG1800HP4" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HS3 Search vendor "NEC Corporation" for product "WG1200HS3" | <= Search vendor "NEC Corporation" for product "WG1200HS3" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1900HP2 Search vendor "NEC Corporation" for product "WG1900HP2" | <= Search vendor "NEC Corporation" for product "WG1900HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HP3 Search vendor "NEC Corporation" for product "WG1200HP3" | <= Search vendor "NEC Corporation" for product "WG1200HP3" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1800HP3 Search vendor "NEC Corporation" for product "WG1800HP3" | <= Search vendor "NEC Corporation" for product "WG1800HP3" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HS2 Search vendor "NEC Corporation" for product "WG1200HS2" | <= Search vendor "NEC Corporation" for product "WG1200HS2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1900HP Search vendor "NEC Corporation" for product "WG1900HP" | <= Search vendor "NEC Corporation" for product "WG1900HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HP2 Search vendor "NEC Corporation" for product "WG1200HP2" | <= Search vendor "NEC Corporation" for product "WG1200HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | W1200EX(-MS) Search vendor "NEC Corporation" for product "W1200EX(-MS)" | <= Search vendor "NEC Corporation" for product "W1200EX(-MS)" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HS Search vendor "NEC Corporation" for product "WG1200HS" | <= Search vendor "NEC Corporation" for product "WG1200HS" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HP Search vendor "NEC Corporation" for product "WG1200HP" | <= Search vendor "NEC Corporation" for product "WG1200HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF300HP2 Search vendor "NEC Corporation" for product "WF300HP2" | <= Search vendor "NEC Corporation" for product "WF300HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | W300P Search vendor "NEC Corporation" for product "W300P" | <= Search vendor "NEC Corporation" for product "W300P" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF800HP Search vendor "NEC Corporation" for product "WF800HP" | <= Search vendor "NEC Corporation" for product "WF800HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8165N Search vendor "NEC Corporation" for product "WR8165N" | <= Search vendor "NEC Corporation" for product "WR8165N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG2200HP Search vendor "NEC Corporation" for product "WG2200HP" | <= Search vendor "NEC Corporation" for product "WG2200HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF1200HP2 Search vendor "NEC Corporation" for product "WF1200HP2" | <= Search vendor "NEC Corporation" for product "WF1200HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1800HP2 Search vendor "NEC Corporation" for product "WG1800HP2" | <= Search vendor "NEC Corporation" for product "WG1800HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF1200HP Search vendor "NEC Corporation" for product "WF1200HP" | <= Search vendor "NEC Corporation" for product "WF1200HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG600HP Search vendor "NEC Corporation" for product "WG600HP" | <= Search vendor "NEC Corporation" for product "WG600HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG300HP Search vendor "NEC Corporation" for product "WG300HP" | <= Search vendor "NEC Corporation" for product "WG300HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF300HP Search vendor "NEC Corporation" for product "WF300HP" | <= Search vendor "NEC Corporation" for product "WF300HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1800HP Search vendor "NEC Corporation" for product "WG1800HP" | <= Search vendor "NEC Corporation" for product "WG1800HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1400HP Search vendor "NEC Corporation" for product "WG1400HP" | <= Search vendor "NEC Corporation" for product "WG1400HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8175N Search vendor "NEC Corporation" for product "WR8175N" | <= Search vendor "NEC Corporation" for product "WR8175N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR9300N Search vendor "NEC Corporation" for product "WR9300N" | <= Search vendor "NEC Corporation" for product "WR9300N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8750N Search vendor "NEC Corporation" for product "WR8750N" | <= Search vendor "NEC Corporation" for product "WR8750N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8160N Search vendor "NEC Corporation" for product "WR8160N" | <= Search vendor "NEC Corporation" for product "WR8160N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR9500N Search vendor "NEC Corporation" for product "WR9500N" | <= Search vendor "NEC Corporation" for product "WR9500N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8600N Search vendor "NEC Corporation" for product "WR8600N" | <= Search vendor "NEC Corporation" for product "WR8600N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8370N Search vendor "NEC Corporation" for product "WR8370N" | <= Search vendor "NEC Corporation" for product "WR8370N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8170N Search vendor "NEC Corporation" for product "WR8170N" | <= Search vendor "NEC Corporation" for product "WR8170N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8700N Search vendor "NEC Corporation" for product "WR8700N" | <= Search vendor "NEC Corporation" for product "WR8700N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8300N Search vendor "NEC Corporation" for product "WR8300N" | <= Search vendor "NEC Corporation" for product "WR8300N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8150N Search vendor "NEC Corporation" for product "WR8150N" | <= Search vendor "NEC Corporation" for product "WR8150N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR4100N Search vendor "NEC Corporation" for product "WR4100N" | <= Search vendor "NEC Corporation" for product "WR4100N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR4500N Search vendor "NEC Corporation" for product "WR4500N" | <= Search vendor "NEC Corporation" for product "WR4500N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8100N Search vendor "NEC Corporation" for product "WR8100N" | <= Search vendor "NEC Corporation" for product "WR8100N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8500N Search vendor "NEC Corporation" for product "WR8500N" | <= Search vendor "NEC Corporation" for product "WR8500N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | CR2500P Search vendor "NEC Corporation" for product "CR2500P" | <= Search vendor "NEC Corporation" for product "CR2500P" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8400N Search vendor "NEC Corporation" for product "WR8400N" | <= Search vendor "NEC Corporation" for product "WR8400N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8200N Search vendor "NEC Corporation" for product "WR8200N" | <= Search vendor "NEC Corporation" for product "WR8200N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR1200H Search vendor "NEC Corporation" for product "WR1200H" | <= Search vendor "NEC Corporation" for product "WR1200H" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR7870S Search vendor "NEC Corporation" for product "WR7870S" | <= Search vendor "NEC Corporation" for product "WR7870S" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR6670S Search vendor "NEC Corporation" for product "WR6670S" | <= Search vendor "NEC Corporation" for product "WR6670S" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR7850S Search vendor "NEC Corporation" for product "WR7850S" | <= Search vendor "NEC Corporation" for product "WR7850S" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR6650S Search vendor "NEC Corporation" for product "WR6650S" | <= Search vendor "NEC Corporation" for product "WR6650S" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR6600H Search vendor "NEC Corporation" for product "WR6600H" | <= Search vendor "NEC Corporation" for product "WR6600H" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR7800H Search vendor "NEC Corporation" for product "WR7800H" | <= Search vendor "NEC Corporation" for product "WR7800H" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3400RN Search vendor "NEC Corporation" for product "WM3400RN" | <= Search vendor "NEC Corporation" for product "WM3400RN" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3450RN Search vendor "NEC Corporation" for product "WM3450RN" | <= Search vendor "NEC Corporation" for product "WM3450RN" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3500R Search vendor "NEC Corporation" for product "WM3500R" | <= Search vendor "NEC Corporation" for product "WM3500R" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3600R Search vendor "NEC Corporation" for product "WM3600R" | <= Search vendor "NEC Corporation" for product "WM3600R" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3800R Search vendor "NEC Corporation" for product "WM3800R" | <= Search vendor "NEC Corporation" for product "WM3800R" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8166N Search vendor "NEC Corporation" for product "WR8166N" | <= Search vendor "NEC Corporation" for product "WR8166N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | MR01LN Search vendor "NEC Corporation" for product "MR01LN" | <= Search vendor "NEC Corporation" for product "MR01LN" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | MR02LN Search vendor "NEC Corporation" for product "MR02LN" | <= Search vendor "NEC Corporation" for product "MR02LN" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1810HP(JE) Search vendor "NEC Corporation" for product "WG1810HP(JE)" | <= Search vendor "NEC Corporation" for product "WG1810HP(JE)" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1810HP(MF) Search vendor "NEC Corporation" for product "WG1810HP(MF)" | <= Search vendor "NEC Corporation" for product "WG1810HP(MF)" and version " <= " | en |
Affected
| ||||||