Vulnerability Intelligence Report
CVE-2024-28010
Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary OS command via the internet.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:0.58%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-259 ↗CWE-259: Use of Hard-coded Password
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| NEC Corporation | WG1800HP4 | all versions (affected) |
| NEC Corporation | WG1200HS3 | all versions (affected) |
| NEC Corporation | WG1900HP2 | all versions (affected) |
| NEC Corporation | WG1200HP3 | all versions (affected) |
| NEC Corporation | WG1800HP3 | all versions (affected) |
| NEC Corporation | WG1200HS2 | all versions (affected) |
| NEC Corporation | WG1900HP | all versions (affected) |
| NEC Corporation | WG1200HP2 | all versions (affected) |
| NEC Corporation | W1200EX(-MS) | all versions (affected) |
| NEC Corporation | WG1200HS | all versions (affected) |
| NEC Corporation | WG1200HP | all versions (affected) |
| NEC Corporation | WF300HP2 | all versions (affected) |
| NEC Corporation | W300P | all versions (affected) |
| NEC Corporation | WF800HP | all versions (affected) |
| NEC Corporation | WR8165N | all versions (affected) |
| NEC Corporation | WG2200HP | all versions (affected) |
| NEC Corporation | WF1200HP2 | all versions (affected) |
| NEC Corporation | WG1800HP2 | all versions (affected) |
| NEC Corporation | WF1200HP | all versions (affected) |
| NEC Corporation | WG600HP | all versions (affected) |
| NEC Corporation | WG300HP | all versions (affected) |
| NEC Corporation | WF300HP | all versions (affected) |
| NEC Corporation | WG1800HP | all versions (affected) |
| NEC Corporation | WG1400HP | all versions (affected) |
| NEC Corporation | WR8175N | all versions (affected) |
| NEC Corporation | WR9300N | all versions (affected) |
| NEC Corporation | WR8750N | all versions (affected) |
| NEC Corporation | WR8160N | all versions (affected) |
| NEC Corporation | WR9500N | all versions (affected) |
| NEC Corporation | WR8600N | all versions (affected) |
| NEC Corporation | WR8370N | all versions (affected) |
| NEC Corporation | WR8170N | all versions (affected) |
| NEC Corporation | WR8700N | all versions (affected) |
| NEC Corporation | WR8300N | all versions (affected) |
| NEC Corporation | WR8150N | all versions (affected) |
| NEC Corporation | WR4100N | all versions (affected) |
| NEC Corporation | WR4500N | all versions (affected) |
| NEC Corporation | WR8100N | all versions (affected) |
| NEC Corporation | WR8500N | all versions (affected) |
| NEC Corporation | CR2500P | all versions (affected) |
| NEC Corporation | WR8400N | all versions (affected) |
| NEC Corporation | WR8200N | all versions (affected) |
| NEC Corporation | WR1200H | all versions (affected) |
| NEC Corporation | WR7870S | all versions (affected) |
| NEC Corporation | WR6670S | all versions (affected) |
| NEC Corporation | WR7850S | all versions (affected) |
| NEC Corporation | WR6650S | all versions (affected) |
| NEC Corporation | WR6600H | all versions (affected) |
| NEC Corporation | WR7800H | all versions (affected) |
| NEC Corporation | WM3400RN | all versions (affected) |
| NEC Corporation | WM3450RN | all versions (affected) |
| NEC Corporation | WM3500R | all versions (affected) |
| NEC Corporation | WM3600R | all versions (affected) |
| NEC Corporation | WM3800R | all versions (affected) |
| NEC Corporation | WR8166N | all versions (affected) |
| NEC Corporation | MR01LN | all versions (affected) |
| NEC Corporation | MR02LN | all versions (affected) |
| NEC Corporation | WG1810HP(JE) | all versions (affected) |
| NEC Corporation | WG1810HP(MF) | all versions (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.577%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | NEC Corporation · Vendor · Japan |
| Reserved | 2024-02-29T08:40:13 |
| Published | 2024-03-28T00:54:15 |
| Last Updated | 2025-01-14T03:54:22 |
Community Chatter & Buzz