Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-0355

Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NEC

Description

Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NEC Corporation WG2600HS

Default version status: unknown

  • Ver.1.7.2 and earlieraffected

NEC Corporation WF1200CR

Default version status: unknown

  • Ver.1.6.0 and earlieraffected

NEC Corporation WG1200CR

Default version status: unknown

  • Ver.1.5.0 and earlieraffected

NEC Corporation GB1200PE

Default version status: unknown

  • Ver.1.3.0 and earlieraffected

NEC Corporation WG2600HP4

Default version status: unknown

  • Ver.1.4.2 and earlieraffected

NEC Corporation WG2600HM4

Default version status: unknown

  • Ver.1.4.2 and earlieraffected

NEC Corporation WG2600HS2

Default version status: unknown

  • Ver.1.3.2 and earlieraffected

NEC Corporation WX3000HP

Default version status: unknown

  • Ver.2.4.2 and earlieraffected

NEC Corporation WX4200D5

Default version status: unknown

  • Ver.1.2.4 and earlieraffected

References