CVE-2024-28015
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary OS command with the root privilege via the internet.
Neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo en NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2 , W300P, WF800HP, WR8165N, WG2200HP , WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8 170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N , WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN y MR02 Todas las versiones de LN permiten a un atacante ejecutar un comando arbitrario del sistema operativo con privilegios de root a través de Internet.
*Credits:
Takayuki Sasaki and Katsunari Yoshioka of Yokohama National University.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-02-29 CVE Reserved
- 2024-03-28 CVE Published
- 2024-03-28 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| NEC Corporation Search vendor "NEC Corporation" | WG1800HP4 Search vendor "NEC Corporation" for product "WG1800HP4" | <= Search vendor "NEC Corporation" for product "WG1800HP4" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HS3 Search vendor "NEC Corporation" for product "WG1200HS3" | <= Search vendor "NEC Corporation" for product "WG1200HS3" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1900HP2 Search vendor "NEC Corporation" for product "WG1900HP2" | <= Search vendor "NEC Corporation" for product "WG1900HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HP3 Search vendor "NEC Corporation" for product "WG1200HP3" | <= Search vendor "NEC Corporation" for product "WG1200HP3" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1800HP3 Search vendor "NEC Corporation" for product "WG1800HP3" | <= Search vendor "NEC Corporation" for product "WG1800HP3" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HS2 Search vendor "NEC Corporation" for product "WG1200HS2" | <= Search vendor "NEC Corporation" for product "WG1200HS2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1900HP Search vendor "NEC Corporation" for product "WG1900HP" | <= Search vendor "NEC Corporation" for product "WG1900HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HP2 Search vendor "NEC Corporation" for product "WG1200HP2" | <= Search vendor "NEC Corporation" for product "WG1200HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | W1200EX(-MS) Search vendor "NEC Corporation" for product "W1200EX(-MS)" | <= Search vendor "NEC Corporation" for product "W1200EX(-MS)" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HS Search vendor "NEC Corporation" for product "WG1200HS" | <= Search vendor "NEC Corporation" for product "WG1200HS" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1200HP Search vendor "NEC Corporation" for product "WG1200HP" | <= Search vendor "NEC Corporation" for product "WG1200HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF300HP2 Search vendor "NEC Corporation" for product "WF300HP2" | <= Search vendor "NEC Corporation" for product "WF300HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | W300P Search vendor "NEC Corporation" for product "W300P" | <= Search vendor "NEC Corporation" for product "W300P" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF800HP Search vendor "NEC Corporation" for product "WF800HP" | <= Search vendor "NEC Corporation" for product "WF800HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8165N Search vendor "NEC Corporation" for product "WR8165N" | <= Search vendor "NEC Corporation" for product "WR8165N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG2200HP Search vendor "NEC Corporation" for product "WG2200HP" | <= Search vendor "NEC Corporation" for product "WG2200HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF1200HP2 Search vendor "NEC Corporation" for product "WF1200HP2" | <= Search vendor "NEC Corporation" for product "WF1200HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1800HP2 Search vendor "NEC Corporation" for product "WG1800HP2" | <= Search vendor "NEC Corporation" for product "WG1800HP2" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF1200HP Search vendor "NEC Corporation" for product "WF1200HP" | <= Search vendor "NEC Corporation" for product "WF1200HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG600HP Search vendor "NEC Corporation" for product "WG600HP" | <= Search vendor "NEC Corporation" for product "WG600HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG300HP Search vendor "NEC Corporation" for product "WG300HP" | <= Search vendor "NEC Corporation" for product "WG300HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WF300HP Search vendor "NEC Corporation" for product "WF300HP" | <= Search vendor "NEC Corporation" for product "WF300HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1800HP Search vendor "NEC Corporation" for product "WG1800HP" | <= Search vendor "NEC Corporation" for product "WG1800HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1400HP Search vendor "NEC Corporation" for product "WG1400HP" | <= Search vendor "NEC Corporation" for product "WG1400HP" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8175N Search vendor "NEC Corporation" for product "WR8175N" | <= Search vendor "NEC Corporation" for product "WR8175N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR9300N Search vendor "NEC Corporation" for product "WR9300N" | <= Search vendor "NEC Corporation" for product "WR9300N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8750N Search vendor "NEC Corporation" for product "WR8750N" | <= Search vendor "NEC Corporation" for product "WR8750N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8160N Search vendor "NEC Corporation" for product "WR8160N" | <= Search vendor "NEC Corporation" for product "WR8160N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR9500N Search vendor "NEC Corporation" for product "WR9500N" | <= Search vendor "NEC Corporation" for product "WR9500N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8600N Search vendor "NEC Corporation" for product "WR8600N" | <= Search vendor "NEC Corporation" for product "WR8600N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8370N Search vendor "NEC Corporation" for product "WR8370N" | <= Search vendor "NEC Corporation" for product "WR8370N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8170N Search vendor "NEC Corporation" for product "WR8170N" | <= Search vendor "NEC Corporation" for product "WR8170N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8700N Search vendor "NEC Corporation" for product "WR8700N" | <= Search vendor "NEC Corporation" for product "WR8700N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8300N Search vendor "NEC Corporation" for product "WR8300N" | <= Search vendor "NEC Corporation" for product "WR8300N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8150N Search vendor "NEC Corporation" for product "WR8150N" | <= Search vendor "NEC Corporation" for product "WR8150N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR4100N Search vendor "NEC Corporation" for product "WR4100N" | <= Search vendor "NEC Corporation" for product "WR4100N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR4500N Search vendor "NEC Corporation" for product "WR4500N" | <= Search vendor "NEC Corporation" for product "WR4500N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8100N Search vendor "NEC Corporation" for product "WR8100N" | <= Search vendor "NEC Corporation" for product "WR8100N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8500N Search vendor "NEC Corporation" for product "WR8500N" | <= Search vendor "NEC Corporation" for product "WR8500N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | CR2500P Search vendor "NEC Corporation" for product "CR2500P" | <= Search vendor "NEC Corporation" for product "CR2500P" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8400N Search vendor "NEC Corporation" for product "WR8400N" | <= Search vendor "NEC Corporation" for product "WR8400N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8200N Search vendor "NEC Corporation" for product "WR8200N" | <= Search vendor "NEC Corporation" for product "WR8200N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR1200H Search vendor "NEC Corporation" for product "WR1200H" | <= Search vendor "NEC Corporation" for product "WR1200H" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR7870S Search vendor "NEC Corporation" for product "WR7870S" | <= Search vendor "NEC Corporation" for product "WR7870S" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR6670S Search vendor "NEC Corporation" for product "WR6670S" | <= Search vendor "NEC Corporation" for product "WR6670S" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR7850S Search vendor "NEC Corporation" for product "WR7850S" | <= Search vendor "NEC Corporation" for product "WR7850S" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR6650S Search vendor "NEC Corporation" for product "WR6650S" | <= Search vendor "NEC Corporation" for product "WR6650S" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR6600H Search vendor "NEC Corporation" for product "WR6600H" | <= Search vendor "NEC Corporation" for product "WR6600H" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR7800H Search vendor "NEC Corporation" for product "WR7800H" | <= Search vendor "NEC Corporation" for product "WR7800H" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3400RN Search vendor "NEC Corporation" for product "WM3400RN" | <= Search vendor "NEC Corporation" for product "WM3400RN" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3450RN Search vendor "NEC Corporation" for product "WM3450RN" | <= Search vendor "NEC Corporation" for product "WM3450RN" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3500R Search vendor "NEC Corporation" for product "WM3500R" | <= Search vendor "NEC Corporation" for product "WM3500R" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3600R Search vendor "NEC Corporation" for product "WM3600R" | <= Search vendor "NEC Corporation" for product "WM3600R" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WM3800R Search vendor "NEC Corporation" for product "WM3800R" | <= Search vendor "NEC Corporation" for product "WM3800R" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WR8166N Search vendor "NEC Corporation" for product "WR8166N" | <= Search vendor "NEC Corporation" for product "WR8166N" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | MR01LN Search vendor "NEC Corporation" for product "MR01LN" | <= Search vendor "NEC Corporation" for product "MR01LN" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | MR02LN Search vendor "NEC Corporation" for product "MR02LN" | <= Search vendor "NEC Corporation" for product "MR02LN" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1810HP(JE) Search vendor "NEC Corporation" for product "WG1810HP(JE)" | <= Search vendor "NEC Corporation" for product "WG1810HP(JE)" and version " <= " | en |
Affected
| ||||||
| NEC Corporation Search vendor "NEC Corporation" | WG1810HP(MF) Search vendor "NEC Corporation" for product "WG1810HP(MF)" | <= Search vendor "NEC Corporation" for product "WG1810HP(MF)" and version " <= " | en |
Affected
| ||||||