description: Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to
execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
problem types: CWE-79: Improper Neutralization of Input During Web Page Generation
affected:
{
defaultStatus: unknown
product: Aterm WG2600HP2
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG2600HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG2200HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG2200HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG1800HP2
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG1800HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG1400HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG600HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG300HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WF300HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR9500N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR9300N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8750N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8700N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8600N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8370N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8175N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8170N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
workarounds:
Stop using the products or remove the USB storage.