CVE-2023-3331: Nec Aterm WF300HP Firmware

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete specific files in the product.

Affected products

• Nec Aterm WF300HP Firmware: affected versions not specified
• Nec Aterm WG1400HP Firmware: affected versions not specified
• Nec Aterm WG1800HP2 Firmware: affected versions not specified
• Nec Aterm WG1800HP Firmware: affected versions not specified
• Nec Aterm WG2200HP Firmware: affected versions not specified
• Nec Aterm WG2600HP2 Firmware: affected versions not specified
• Nec Aterm WG2600HP Firmware: affected versions not specified
• Nec Aterm WG300HP Firmware: affected versions not specified
• Nec Aterm WG600HP Firmware: affected versions not specified
• Nec Aterm WR8170N Firmware: affected versions not specified
• Nec Aterm WR8175N Firmware: affected versions not specified
• Nec Aterm WR8370N Firmware: affected versions not specified
• Nec Aterm WR8600N Firmware: affected versions not specified
• Nec Aterm WR8700N Firmware: affected versions not specified
• Nec Aterm WR8750N Firmware: affected versions not specified
• Nec Aterm WR9300N Firmware: affected versions not specified
• Nec Aterm WR9500N Firmware: affected versions not specified

Published 2023-06-28. Last modified 2026-06-17.