Known vulnerabilities in Aterm WG2200HP

Vendor: NEC Corporation
Software: Aterm WG2200HP
Software CPE: cpe:2.3:h:nec_corporation:aterm_wg2200hp:*:*:*:*:*:*:*:*
Website: https://www.nec.com/
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Aterm WG2200HP Aterm WG2200HP is affected by 16 known vulnerabilities: 4 medium, 12 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88170 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28016		 CWE-200 Low
No
No
 - 05.04.2024 SB2024040523
#VU88169 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-28015		 CWE-78 Low
No
No
 - 05.04.2024 SB2024040523
#VU88168 - Memory corruption
CVE-2024-28014		 CWE-119 Medium
No
No
 - 05.04.2024 SB2024040523
#VU88167 - Insufficient Session Expiration
CVE-2024-28013		 CWE-613 Low
No
No
 - 05.04.2024 SB2024040523
#VU88166 - Improper input validation
CVE-2024-28011		 CWE-20 Low
No
No
 - 05.04.2024 SB2024040523
#VU88165 - Use of Hard-coded Credentials
CVE-2024-28010		 CWE-798 Low
No
No
 - 05.04.2024 SB2024040523
#VU88164 - Use of Weak Credentials
CVE-2024-28012		 CWE-1391 Low
No
No
 - 05.04.2024 SB2024040523
#VU88163 - Use of Weak Credentials
CVE-2024-28009		 CWE-1391 Low
No
No
 - 05.04.2024 SB2024040523
#VU88162 - Active Debug Code
CVE-2024-28008		 CWE-489 Medium
No
No
 - 05.04.2024 SB2024040523
#VU88161 - Incorrect Permission Assignment for Critical Resource
CVE-2024-28007		 CWE-732 Medium
No
No
 - 05.04.2024 SB2024040523
#VU88160 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28006		 CWE-200 Low
No
No
 - 05.04.2024 SB2024040523
#VU88157 - Incorrect Permission Assignment for Critical Resource
CVE-2024-28005		 CWE-732 Medium
No
No
 - 05.04.2024 SB2024040523
#VU77718 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-3333		 CWE-78 Low
No
No
 - 27.06.2023 SB2023062704
#VU77717 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3332		 CWE-79 Low
No
No
 - 27.06.2023 SB2023062704
#VU77714 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-3331		 CWE-22 Low
No
No
 - 27.06.2023 SB2023062704
#VU77713 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-3330		 CWE-22 Low
No
No
 - 27.06.2023 SB2023062704