{"id":"CVE-2024-28009","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-28009","generatedAt":"2026-10-28T02:17:09.570Z","title":"Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2,…","description":"Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command with the root privilege via the internet.","published":"2024-03-28T01:15:47.000Z","lastModified":"2026-06-17T07:20:47.000Z","status":"Analyzed","sourceIdentifier":"psirt-info@cyber.jp.nec.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-287"],"affected":["nec/aterm wg1800hp4 firmware","nec/aterm wg1200hs3 firmware","nec/aterm wg1900hp2 firmware","nec/aterm wg1200hp3 firmware","nec/aterm wg1800hp3 firmware","nec/aterm wg1200hs2 firmware","nec/aterm wg1900hp firmware","nec/aterm wg1200hp2 firmware","nec/aterm w1200ex-ms firmware","nec/aterm wg1200hs firmware","nec/aterm wg1200hp firmware","nec/aterm wf300hp2 firmware","nec/aterm w300p firmware","nec/aterm wf800hp firmware","nec/aterm wr8165n firmware","nec/aterm wg2200hp firmware","nec/aterm wf1200hp2 firmware","nec/aterm wg1800hp2 firmware","nec/aterm wf1200hp firmware","nec/aterm wg600hp firmware","nec/aterm wg300hp firmware","nec/aterm wf300hp firmware","nec/aterm wg1800hp firmware","nec/aterm wg1400hp firmware","nec/aterm wr8175n firmware","nec/aterm wr9300n firmware","nec/aterm wr8750n firmware","nec/aterm wr8160n firmware","nec/aterm wr9500n firmware","nec/aterm wr8600n firmware","nec/aterm wr8370n firmware","nec/aterm wr8170n firmware","nec/aterm wr8700n firmware","nec/aterm wr8300n firmware","nec/aterm wr8150n firmware","nec/aterm wr4100n firmware","nec/aterm wr4500n firmware","nec/aterm wr8100n firmware","nec/aterm wr8500n firmware","nec/aterm cr2500p firmware","nec/aterm wr8400n firmware","nec/aterm wr8200n firmware","nec/aterm wr1200h firmware","nec/aterm wr7870s firmware","nec/aterm wr6670s firmware","nec/aterm wr7850s firmware","nec/aterm wr6650s firmware","nec/aterm wr6600h firmware","nec/aterm wr7800h firmware","nec/aterm wm3400rn firmware","nec/aterm wm3450rn firmware","nec/aterm wm3500r firmware","nec/aterm wm3600r firmware","nec/aterm wm3800r firmware","nec/aterm wr8166n firmware","nec/aterm mr01ln firmware","nec/aterm mr02ln firmware","nec/aterm wg1810hp\\(je\\) firmware","nec/aterm wg1810hp\\(mf\\) firmware"],"epss":{"score":0.0065,"percentile":0.50878,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.65%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://jpn.nec.com/security-info/secinfo/nv24-001_en.html","tags":["Vendor Advisory"],"source":"psirt-info@cyber.jp.nec.com"},{"url":"https://https://jpn.nec.com/security-info/secinfo/nv24-001_en.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-28009","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}