description: Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete
specific files in the product.
problem types: CWE-22: Improper Limitation of a Pathname to a Restricted Directory
affected:
{
defaultStatus: unknown
product: Aterm WG2600HP2
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG2600HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG2200HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG2200HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG1800HP2
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG1800HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG1400HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG600HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WG300HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WF300HP
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR9500N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR9300N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8750N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8700N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8600N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8370N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8175N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Aterm WR8170N
vendor: NEC Corporation
versions:
status: affected, version: all versions
}
workarounds:
Stop using the products or remove the USB storage.