CVE-2023-3330
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and…
Does this matter?
Lower severity and a low EPSS score (0.51%). Track it; it rarely justifies an emergency change on its own.
Description
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.51% probability · 42th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- nec/aterm wf300hp firmware · nec/aterm wg1400hp firmware · nec/aterm wg1800hp firmware · nec/aterm wg1800hp2 firmware · nec/aterm wg2200hp firmware · nec/aterm wg2600hp firmware · nec/aterm wg2600hp2 firmware · nec/aterm wg300hp firmware · nec/aterm wg600hp firmware · nec/aterm wr8600n firmware · nec/aterm wr8700n firmware · nec/aterm wr8750n firmware · nec/aterm wr9300n firmware · nec/aterm wr9500n firmware · nec/aterm wr8170n firmware · nec/aterm wr8175n firmware · nec/aterm wr8370n firmware
- Source
- psirt-info@cyber.jp.nec.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.