CVE-2024-28006

Description

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to view device information.

Category

5.3
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.12%
Affected: NEC Corporation WG1800HP4
Affected: NEC Corporation WG1200HS3
Affected: NEC Corporation WG1900HP2
Affected: NEC Corporation WG1200HP3
Affected: NEC Corporation WG1800HP3
Affected: NEC Corporation WG1200HS2
Affected: NEC Corporation WG1900HP
Affected: NEC Corporation WG1200HP2
Affected: NEC Corporation W1200EX(-MS)
Affected: NEC Corporation WG1200HS
Affected: NEC Corporation WG1200HP
Affected: NEC Corporation WF300HP2
Affected: NEC Corporation W300P
Affected: NEC Corporation WF800HP
Affected: NEC Corporation WR8165N
Affected: NEC Corporation WG2200HP
Affected: NEC Corporation WF1200HP2
Affected: NEC Corporation WG1800HP2
Affected: NEC Corporation WF1200HP
Affected: NEC Corporation WG600HP
Affected: NEC Corporation WG300HP
Affected: NEC Corporation WF300HP
Affected: NEC Corporation WG1800HP
Affected: NEC Corporation WG1400HP
Affected: NEC Corporation WR8175N
Affected: NEC Corporation WR9300N
Affected: NEC Corporation WR8750N
Affected: NEC Corporation WR8160N
Affected: NEC Corporation WR9500N
Affected: NEC Corporation WR8600N
Affected: NEC Corporation WR8370N
Affected: NEC Corporation WR8170N
Affected: NEC Corporation WR8700N
Affected: NEC Corporation WR8300N
Affected: NEC Corporation WR8150N
Affected: NEC Corporation WR4100N
Affected: NEC Corporation WR4500N
Affected: NEC Corporation WR8100N
Affected: NEC Corporation WR8500N
Affected: NEC Corporation CR2500P
Affected: NEC Corporation WR8400N
Affected: NEC Corporation WR8200N
Affected: NEC Corporation WR1200H
Affected: NEC Corporation WR7870S
Affected: NEC Corporation WR6670S
Affected: NEC Corporation WR7850S
Affected: NEC Corporation WR6650S
Affected: NEC Corporation WR6600H
Affected: NEC Corporation WR7800H
Affected: NEC Corporation WM3400RN
Affected: NEC Corporation WM3450RN
Affected: NEC Corporation WM3500R
Affected: NEC Corporation WM3600R
Affected: NEC Corporation WM3800R
Affected: NEC Corporation WR8166N
Affected: NEC Corporation MR01LN
Affected: NEC Corporation MR02LN
Affected: NEC Corporation WG1810HP(JE)
Affected: NEC Corporation WG1810HP(MF)
Published at:
Updated at:

References

Link Tags
https://jpn.nec.com/security-info/secinfo/nv24-001_en.html
https://https://jpn.nec.com/security-info/secinfo/nv24-001_en.html

Frequently Asked Questions

What is the severity of CVE-2024-28006?
CVE-2024-28006 has been scored as a medium severity vulnerability.
How to fix CVE-2024-28006?
To fix CVE-2024-28006, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-28006 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-28006 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-28006?
CVE-2024-28006 affects NEC Corporation WG1800HP4, NEC Corporation WG1200HS3, NEC Corporation WG1900HP2, NEC Corporation WG1200HP3, NEC Corporation WG1800HP3, NEC Corporation WG1200HS2, NEC Corporation WG1900HP, NEC Corporation WG1200HP2, NEC Corporation W1200EX(-MS), NEC Corporation WG1200HS, NEC Corporation WG1200HP, NEC Corporation WF300HP2, NEC Corporation W300P, NEC Corporation WF800HP, NEC Corporation WR8165N, NEC Corporation WG2200HP, NEC Corporation WF1200HP2, NEC Corporation WG1800HP2, NEC Corporation WF1200HP, NEC Corporation WG600HP, NEC Corporation WG300HP, NEC Corporation WF300HP, NEC Corporation WG1800HP, NEC Corporation WG1400HP, NEC Corporation WR8175N, NEC Corporation WR9300N, NEC Corporation WR8750N, NEC Corporation WR8160N, NEC Corporation WR9500N, NEC Corporation WR8600N, NEC Corporation WR8370N, NEC Corporation WR8170N, NEC Corporation WR8700N, NEC Corporation WR8300N, NEC Corporation WR8150N, NEC Corporation WR4100N, NEC Corporation WR4500N, NEC Corporation WR8100N, NEC Corporation WR8500N, NEC Corporation CR2500P, NEC Corporation WR8400N, NEC Corporation WR8200N, NEC Corporation WR1200H, NEC Corporation WR7870S, NEC Corporation WR6670S, NEC Corporation WR7850S, NEC Corporation WR6650S, NEC Corporation WR6600H, NEC Corporation WR7800H, NEC Corporation WM3400RN, NEC Corporation WM3450RN, NEC Corporation WM3500R, NEC Corporation WM3600R, NEC Corporation WM3800R, NEC Corporation WR8166N, NEC Corporation MR01LN, NEC Corporation MR02LN, NEC Corporation WG1810HP(JE), NEC Corporation WG1810HP(MF).
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.