Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2,…

Description

Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker who has obtained high privileges can execute arbitrary scripts.

Scores

EPSS (exploitation in 30 days)

0.48% · top 58% of all CVEs (4 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.7.

Weakness

• CWE-250: Execution with Unnecessary Privileges (opens in a new tab)All about CWE-250 and its CVEs
• CWE-94 Improper Control of Generation of Code ('Code Injection') (opens in a new tab)All about CWE-94 and its CVEs

Affected products

• NEC Corporation · WG1800HP4

  • affected all versions

• NEC Corporation · WG1200HS3

  • affected all versions

• NEC Corporation · WG1900HP2

  • affected all versions

• NEC Corporation · WG1200HP3

  • affected all versions

• NEC Corporation · WG1800HP3

  • affected all versions

• NEC Corporation · WG1200HS2

  • affected all versions

• NEC Corporation · WG1900HP

  • affected all versions

• NEC Corporation · WG1200HP2

  • affected all versions

• NEC Corporation · W1200EX(-MS)

  • affected all versions

• NEC Corporation · WG1200HS

  • affected all versions

• NEC Corporation · WG1200HP

  • affected all versions

• NEC Corporation · WF300HP2

  • affected all versions

• NEC Corporation · W300P

  • affected all versions

• NEC Corporation · WF800HP

  • affected all versions

• NEC Corporation · WR8165N

  • affected all versions

• NEC Corporation · WG2200HP

  • affected all versions

• NEC Corporation · WF1200HP2

  • affected all versions

• NEC Corporation · WG1800HP2

  • affected all versions

• NEC Corporation · WF1200HP

  • affected all versions

• NEC Corporation · WG600HP

  • affected all versions

• NEC Corporation · WG300HP

  • affected all versions

• NEC Corporation · WF300HP

  • affected all versions

• NEC Corporation · WG1800HP

  • affected all versions

• NEC Corporation · WG1400HP

  • affected all versions

• NEC Corporation · WR8175N

  • affected all versions

• NEC Corporation · WR9300N

  • affected all versions

• NEC Corporation · WR8750N

  • affected all versions

• NEC Corporation · WR8160N

  • affected all versions

• NEC Corporation · WR9500N

  • affected all versions

• NEC Corporation · WR8600N

  • affected all versions

• NEC Corporation · WR8370N

  • affected all versions

• NEC Corporation · WR8170N

  • affected all versions

• NEC Corporation · WR8700N

  • affected all versions

• NEC Corporation · WR8300N

  • affected all versions

• NEC Corporation · WR8150N

  • affected all versions

• NEC Corporation · WR4100N

  • affected all versions

• NEC Corporation · WR4500N

  • affected all versions

• NEC Corporation · WR8100N

  • affected all versions

• NEC Corporation · WR8500N

  • affected all versions

• NEC Corporation · CR2500P

  • affected all versions

• NEC Corporation · WR8400N

  • affected all versions

• NEC Corporation · WR8200N

  • affected all versions

• NEC Corporation · WR1200H

  • affected all versions

• NEC Corporation · WR7870S

  • affected all versions

• NEC Corporation · WR6670S

  • affected all versions

• NEC Corporation · WR7850S

  • affected all versions

• NEC Corporation · WR6650S

  • affected all versions

• NEC Corporation · WR6600H

  • affected all versions

• NEC Corporation · WR7800H

  • affected all versions

• NEC Corporation · WM3400RN

  • affected all versions

• NEC Corporation · WM3450RN

  • affected all versions

• NEC Corporation · WM3500R

  • affected all versions

• NEC Corporation · WM3600R

  • affected all versions

• NEC Corporation · WM3800R

  • affected all versions

• NEC Corporation · WR8166N

  • affected all versions

• NEC Corporation · MR01LN

  • affected all versions

• NEC Corporation · MR02LN

  • affected all versions

• NEC Corporation · WG1810HP(JE)

  • affected all versions

• NEC Corporation · WG1810HP(MF)

  • affected all versions

References (2)

• https://jpn.nec.com/security-info/secinfo/nv24-001_en.html (opens in a new tab)
• https://https://jpn.nec.com/security-info/secinfo/nv24-001_en.html (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-28005](https://trackcve.app/badge/CVE-2024-28005.svg)](https://trackcve.app/cve/CVE-2024-28005)

Record last updated 14 Jan 2025, 03:49 UTC.