CVE-2023-3330
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
CVE-2023-3330 describes an improper limitation of a pathname to a restricted directory vulnerability in NEC Corporation products, allowing an attacker to access specific files on the device.
Risk Assessment
This vulnerability may lead to the exposure of sensitive information, posing a threat to the organization's data security.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor file access for potential attack attempts.
Other vulnerabilities in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N, WR8170N
See all- CVE-2023-3333High
CVE-2023-3333 describes an improper neutralization of special elements used in OS commands vulnerability in NEC Corporation Aterm devices, allowing an attacker to execute arbitrary OS commands with root privileges after obtaining high privileges by exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
- CVE-2023-3331Medium
The CVE-2023-3331 vulnerability in NEC Corporation Aterm products has an improper limitation of a pathname to a restricted directory, allowing an attacker to delete specific files in the product.
Original NVD description (English source)
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS