CVE-2023-3333: Nec Aterm WF300HP Firmware

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.

Affected products

• Nec Aterm WF300HP Firmware: affected versions not specified
• Nec Aterm WG1400HP Firmware: affected versions not specified
• Nec Aterm WG1800HP2 Firmware: affected versions not specified
• Nec Aterm WG1800HP Firmware: affected versions not specified
• Nec Aterm WG2200HP Firmware: affected versions not specified
• Nec Aterm WG2600HP2 Firmware: affected versions not specified
• Nec Aterm WG2600HP Firmware: affected versions not specified
• Nec Aterm WG300HP Firmware: affected versions not specified
• Nec Aterm WG600HP Firmware: affected versions not specified
• Nec Aterm WR8170N Firmware: affected versions not specified
• Nec Aterm WR8175N Firmware: affected versions not specified
• Nec Aterm WR8370N Firmware: affected versions not specified
• Nec Aterm WR8600N Firmware: affected versions not specified
• Nec Aterm WR8700N Firmware: affected versions not specified
• Nec Aterm WR8750N Firmware: affected versions not specified
• Nec Aterm WR9300N Firmware: affected versions not specified
• Nec Aterm WR9500N Firmware: affected versions not specified

Published 2023-06-28. Last modified 2026-06-17.