CVE-2023-3331
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
The CVE-2023-3331 vulnerability in NEC Corporation Aterm products has an improper limitation of a pathname to a restricted directory, allowing an attacker to delete specific files in the product.
Risk Assessment
This vulnerability may lead to data loss and disruption of device functionality, posing a serious risk to organizations using these products.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor systems for potential attack attempts.
Original NVD description (English source)
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete specific files in the product.