Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-0354

Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 an

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NEC

Description

Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to inject an arbitrary script via the network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NEC Corporation WG2600HS

Default version status: unknown

  • Ver.1.7.2 and earlieraffected

NEC Corporation WG2600HP4

Default version status: unknown

  • Ver.1.4.2 and earlieraffected

NEC Corporation WG2600HM4

Default version status: unknown

  • Ver.1.4.2 and earlieraffected

NEC Corporation WG2600HS2

Default version status: unknown

  • Ver.1.3.2 and earlieraffected

NEC Corporation WX3000HP

Default version status: unknown

  • Ver.2.4.2 and earlieraffected

NEC Corporation WX4200D5

Default version status: unknown

  • Ver.1.2.4 and earlieraffected

References