{"id":"CVE-2024-28013","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-28013","generatedAt":"2026-10-27T23:58:35.333Z","title":"Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2,…","description":"Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to change settings via the internet.","published":"2024-03-28T01:15:48.000Z","lastModified":"2026-06-17T07:20:48.000Z","status":"Analyzed","sourceIdentifier":"psirt-info@cyber.jp.nec.com","cvss":{"version":"3.1","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"cwe":["CWE-330"],"affected":["nec/aterm wg1800hp4 firmware","nec/aterm wg1200hs3 firmware","nec/aterm wg1900hp2 firmware","nec/aterm wg1200hp3 firmware","nec/aterm wg1800hp3 firmware","nec/aterm wr7850s firmware","nec/aterm wr6650s firmware","nec/aterm wr6600h firmware","nec/aterm wr7800h firmware","nec/aterm wm3400rn firmware","nec/aterm wm3450rn firmware","nec/aterm wm3500r firmware","nec/aterm wm3600r firmware","nec/aterm wm3800r firmware","nec/aterm wr8166n firmware","nec/aterm mr01ln firmware","nec/aterm mr02ln firmware","nec/aterm wg1810hp\\(je\\) firmware","nec/aterm wg1810hp\\(mf\\) firmware","nec/aterm wg1200hs2 firmware","nec/aterm wg1900hp firmware","nec/aterm wg1200hp2 firmware","nec/aterm w1200ex-ms firmware","nec/aterm wg1200hs firmware","nec/aterm wg1200hp firmware","nec/aterm wf300hp2 firmware","nec/aterm w300p firmware","nec/aterm wf800hp firmware","nec/aterm wr8165n firmware","nec/aterm wg2200hp firmware","nec/aterm wf1200hp2 firmware","nec/aterm wg1800hp2 firmware","nec/aterm wf1200hp firmware","nec/aterm wg600hp firmware","nec/aterm wg300hp firmware","nec/aterm wf300hp firmware","nec/aterm wg1800hp firmware","nec/aterm wg1400hp firmware","nec/aterm wr8175n firmware","nec/aterm wr9300n firmware","nec/aterm wr8750n firmware","nec/aterm wr8160n firmware","nec/aterm wr9500n firmware","nec/aterm wr8600n firmware","nec/aterm wr8370n firmware","nec/aterm wr8170n firmware","nec/aterm wr8700n firmware","nec/aterm wr8300n firmware","nec/aterm wr8150n firmware","nec/aterm wr4100n firmware","nec/aterm wr4500n firmware","nec/aterm wr8100n firmware","nec/aterm wr8500n firmware","nec/aterm cr2500p firmware","nec/aterm wr8400n firmware","nec/aterm wr8200n firmware","nec/aterm wr1200h firmware","nec/aterm wr7870s firmware","nec/aterm wr6670s firmware"],"epss":{"score":0.00436,"percentile":0.37634,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://jpn.nec.com/security-info/secinfo/nv24-001_en.html","tags":["Vendor Advisory"],"source":"psirt-info@cyber.jp.nec.com"},{"url":"https://https://jpn.nec.com/security-info/secinfo/nv24-001_en.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-28013","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}