Known vulnerabilities in Aterm WG2600HS

Vendor: NEC Corporation
Software: Aterm WG2600HS
Software CPE: cpe:2.3:h:nec_corporation:aterm_wg2600hs:*:*:*:*:*:*:*:*
Website: https://www.nec.com/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Aterm WG2600HS Aterm WG2600HS is affected by 11 known vulnerabilities: 1 high, 2 medium, 8 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104062 - Missing Authentication for Critical Function
CVE-2025-0355		 CWE-306 High
No
No
 1.7.2 19.02.2025 SB202502197141
#VU104061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0354		 CWE-79 Low
No
No
 1.7.2 19.02.2025 SB202502197141
#VU52009 - Improper Access Control
CVE-2021-20712		 CWE-284 Medium
No
No
 1.6.1 09.04.2021 SB2021040902
#VU52008 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20711		 CWE-78 Medium
No
No
 1.6.1 09.04.2021 SB2021040902
#VU52007 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20710		 CWE-79 Low
No
No
 1.6.1 09.04.2021 SB2021040902
#VU52006 - Improper Validation of Integrity Check Value
CVE-2021-20709		 CWE-354 Low
No
No
 1.6.1 09.04.2021 SB2021040902
#VU52005 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20708		 CWE-78 Low
No
No
 1.6.1 09.04.2021 SB2021040902
#VU25452 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-5525		 CWE-78 Low
No
No
 1.5.1 19.02.2020 SB2020021910
#VU25450 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-5524		 CWE-78 Low
No
No
 1.5.1 19.02.2020 SB2020021910
#VU25449 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-5534		 CWE-78 Low
No
No
 1.5.1 19.02.2020 SB2020021910
#VU25448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5533		 CWE-79 Low
No
No
 1.5.1 19.02.2020 SB2020021910