CVE-2024-28010
- State
- Published
- Severity
- 9.8 Critical
- Published
- Mar 28, 2024
- Updated
- Jan 14, 2025
- Reserved
- Feb 29, 2024
Description
Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary OS command via the internet.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-259 Use of Hard-coded Password
Affected Products
| Product | Versions |
|---|---|
WG1800HP4NEC Corporation |
|
WG1200HS3NEC Corporation |
|
WG1900HP2NEC Corporation |
|
WG1200HP3NEC Corporation |
|
WG1800HP3NEC Corporation |
|
WG1200HS2NEC Corporation |
|
WG1900HPNEC Corporation |
|
WG1200HP2NEC Corporation |
|
W1200EX(-MS)NEC Corporation |
|
WG1200HSNEC Corporation |
|
WG1200HPNEC Corporation |
|
WF300HP2NEC Corporation |
|
W300PNEC Corporation |
|
WF800HPNEC Corporation |
|
WR8165NNEC Corporation |
|
WG2200HPNEC Corporation |
|
WF1200HP2NEC Corporation |
|
WG1800HP2NEC Corporation |
|
WF1200HPNEC Corporation |
|
WG600HPNEC Corporation |
|
WG300HPNEC Corporation |
|
WF300HPNEC Corporation |
|
WG1800HPNEC Corporation |
|
WG1400HPNEC Corporation |
|
WR8175NNEC Corporation |
|
WR9300NNEC Corporation |
|
WR8750NNEC Corporation |
|
WR8160NNEC Corporation |
|
WR9500NNEC Corporation |
|
WR8600NNEC Corporation |
|
WR8370NNEC Corporation |
|
WR8170NNEC Corporation |
|
WR8700NNEC Corporation |
|
WR8300NNEC Corporation |
|
WR8150NNEC Corporation |
|
WR4100NNEC Corporation |
|
WR4500NNEC Corporation |
|
WR8100NNEC Corporation |
|
WR8500NNEC Corporation |
|
CR2500PNEC Corporation |
|
WR8400NNEC Corporation |
|
WR8200NNEC Corporation |
|
WR1200HNEC Corporation |
|
WR7870SNEC Corporation |
|
WR6670SNEC Corporation |
|
WR7850SNEC Corporation |
|
WR6650SNEC Corporation |
|
WR6600HNEC Corporation |
|
WR7800HNEC Corporation |
|
WM3400RNNEC Corporation |
|
WM3450RNNEC Corporation |
|
WM3500RNEC Corporation |
|
WM3600RNEC Corporation |
|
WM3800RNEC Corporation |
|
WR8166NNEC Corporation |
|
MR01LNNEC Corporation |
|
MR02LNNEC Corporation |
|
WG1810HP(JE)NEC Corporation |
|
WG1810HP(MF)NEC Corporation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.