{"schemaVersion":3,"id":"CVE-2023-3333","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.","dates":{"published":"2023-06-28T01:33:27.976Z","modified":"2024-12-04T20:54:19.552Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.2,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.2,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00713,"percentile":0.5279,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00713},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00713,"percentile":0.5279}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00713,"percentile":0.5279}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/78.html"}],"affected":[{"vendor":"nec corporation","product":"aterm wf300hp","name":"Aterm WF300HP","label":"aterm wf300hp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wf300hp"},{"vendor":"nec corporation","product":"aterm wg1400hp","name":"Aterm WG1400HP","label":"aterm wg1400hp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wg1400hp"},{"vendor":"nec corporation","product":"aterm wg1800hp","name":"Aterm WG1800HP","label":"aterm wg1800hp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wg1800hp"},{"vendor":"nec corporation","product":"aterm wg1800hp2","name":"Aterm WG1800HP2","label":"aterm wg1800hp2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wg1800hp2"},{"vendor":"nec corporation","product":"aterm wg2200hp","name":"Aterm WG2200HP","label":"aterm wg2200hp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wg2200hp"},{"vendor":"nec corporation","product":"aterm wg2600hp","name":"Aterm WG2600HP","label":"aterm wg2600hp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wg2600hp"},{"vendor":"nec corporation","product":"aterm wg2600hp2","name":"Aterm WG2600HP2","label":"aterm wg2600hp2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wg2600hp2"},{"vendor":"nec corporation","product":"aterm wg300hp","name":"Aterm WG300HP","label":"aterm wg300hp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wg300hp"},{"vendor":"nec corporation","product":"aterm wg600hp","name":"Aterm WG600HP","label":"aterm wg600hp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wg600hp"},{"vendor":"nec corporation","product":"aterm wr8170n","name":"Aterm WR8170N","label":"aterm wr8170n","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wr8170n"},{"vendor":"nec corporation","product":"aterm wr8175n","name":"Aterm WR8175N","label":"aterm wr8175n","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wr8175n"},{"vendor":"nec corporation","product":"aterm wr8370n","name":"Aterm WR8370N","label":"aterm wr8370n","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wr8370n"},{"vendor":"nec corporation","product":"aterm wr8600n","name":"Aterm WR8600N","label":"aterm wr8600n","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wr8600n"},{"vendor":"nec corporation","product":"aterm wr8700n","name":"Aterm WR8700N","label":"aterm wr8700n","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wr8700n"},{"vendor":"nec corporation","product":"aterm wr8750n","name":"Aterm WR8750N","label":"aterm wr8750n","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wr8750n"},{"vendor":"nec corporation","product":"aterm wr9300n","name":"Aterm WR9300N","label":"aterm wr9300n","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wr9300n"},{"vendor":"nec corporation","product":"aterm wr9500n","name":"Aterm WR9500N","label":"aterm wr9500n","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/nec_corporation/aterm_wr9500n"},{"vendor":"nec","product":"aterm_wf300hp_firmware","name":"aterm wf300hp firmware","label":"aterm_wf300hp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wf300hp"},{"vendor":"nec","product":"aterm_wg1400hp_firmware","name":"aterm wg1400hp firmware","label":"aterm_wg1400hp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wg1400hp"},{"vendor":"nec","product":"aterm_wg1800hp_firmware","name":"aterm wg1800hp firmware","label":"aterm_wg1800hp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wg1800hp"},{"vendor":"nec","product":"aterm_wg1800hp2_firmware","name":"aterm wg1800hp2 firmware","label":"aterm_wg1800hp2_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wg1800hp2"},{"vendor":"nec","product":"aterm_wg2200hp_firmware","name":"aterm wg2200hp firmware","label":"aterm_wg2200hp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wg2200hp"},{"vendor":"nec","product":"aterm_wg2600hp_firmware","name":"aterm wg2600hp firmware","label":"aterm_wg2600hp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wg2600hp"},{"vendor":"nec","product":"aterm_wg2600hp2_firmware","name":"aterm wg2600hp2 firmware","label":"aterm_wg2600hp2_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wg2600hp2"},{"vendor":"nec","product":"aterm_wg300hp_firmware","name":"aterm wg300hp firmware","label":"aterm_wg300hp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wg300hp"},{"vendor":"nec","product":"aterm_wg600hp_firmware","name":"aterm wg600hp firmware","label":"aterm_wg600hp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wg600hp"},{"vendor":"nec","product":"aterm_wr8170n_firmware","name":"aterm wr8170n firmware","label":"aterm_wr8170n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wr8170n"},{"vendor":"nec","product":"aterm_wr8175n_firmware","name":"aterm wr8175n firmware","label":"aterm_wr8175n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wr8175n"},{"vendor":"nec","product":"aterm_wr8370n_firmware","name":"aterm wr8370n firmware","label":"aterm_wr8370n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wr8370n"},{"vendor":"nec","product":"aterm_wr8600n_firmware","name":"aterm wr8600n firmware","label":"aterm_wr8600n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wr8600n"},{"vendor":"nec","product":"aterm_wr8700n_firmware","name":"aterm wr8700n firmware","label":"aterm_wr8700n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wr8700n"},{"vendor":"nec","product":"aterm_wr8750n_firmware","name":"aterm wr8750n firmware","label":"aterm_wr8750n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wr8750n"},{"vendor":"nec","product":"aterm_wr9300n_firmware","name":"aterm wr9300n firmware","label":"aterm_wr9300n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wr9300n"},{"vendor":"nec","product":"aterm_wr9500n_firmware","name":"aterm wr9500n firmware","label":"aterm_wr9500n_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/nec/aterm_wr9500n"}],"affectedCount":34,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html","label":"https//jpn.nec.com/security-info/secinfo/nv23-007_en.html","hostname":"https","tags":["Broken Link"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2023-06-28T01:33:27.976Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-12-04T20:54:19.552Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":29,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T10:42:19.316Z","stale":false,"partial":false}}