Vulnerability Description
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete specific files in the product.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nec | Aterm Wf300Hp Firmware | - |
| Nec | Aterm Wf300Hp | - |
| Nec | Aterm Wg1400Hp Firmware | - |
| Nec | Aterm Wg1400Hp | - |
| Nec | Aterm Wg1800Hp Firmware | - |
| Nec | Aterm Wg1800Hp | - |
| Nec | Aterm Wg1800Hp2 Firmware | - |
| Nec | Aterm Wg1800Hp2 | - |
| Nec | Aterm Wg2200Hp Firmware | - |
| Nec | Aterm Wg2200Hp | - |
| Nec | Aterm Wg2600Hp Firmware | - |
| Nec | Aterm Wg2600Hp | - |
| Nec | Aterm Wg2600Hp2 Firmware | - |
| Nec | Aterm Wg2600Hp2 | - |
| Nec | Aterm Wg300Hp Firmware | - |
| Nec | Aterm Wg300Hp | - |
| Nec | Aterm Wg600Hp Firmware | - |
| Nec | Aterm Wg600Hp | - |
| Nec | Aterm Wr8600N Firmware | - |
| Nec | Aterm Wr8600N | - |
Related Weaknesses (CWE)
References
- https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.htmlVendor Advisory
- https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.htmlVendor Advisory
FAQ
What is CVE-2023-3331?
CVE-2023-3331 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500...
How severe is CVE-2023-3331?
CVE-2023-3331 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-3331?
Check the references section above for vendor advisories and patch information. Affected products include: Nec Aterm Wf300Hp Firmware, Nec Aterm Wf300Hp, Nec Aterm Wg1400Hp Firmware, Nec Aterm Wg1400Hp, Nec Aterm Wg1800Hp Firmware.