CVE-2023-3332

MediumCVSS 4.8

Published: 28/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

A vulnerability in NEC Aterm devices allows an attacker to execute arbitrary scripts after obtaining high privileges by exploiting the previous vulnerabilities CVE-2023-3330 and CVE-2023-3331.

Risk Assessment

This threat could lead to device takeover and access to sensitive data within the network.

Recommendation

It is recommended to update devices to the latest firmware version and monitor systems for unauthorized activity.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.