CVE-2023-3330
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation...
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.
- Record
CVE-2023-3330- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.
- Record
CVE-2023-3330- Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2023-43998
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.
- Record
EUVD-2023-43998- CVSS
- 0.0 None
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxp5-q6rf-mmr6
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation...
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2200HP all versions allows a attacker to obtain specific files in the product
.
- Record
GHSA-xxp5-q6rf-mmr6- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
- nec corporation aterm wg2600hp
- nec corporation aterm wg2600hp2
- nec corporation aterm wf300hp
- nec corporation aterm wg1400hp
- nec corporation aterm wg1800hp
- nec corporation aterm wg1800hp2
- nec corporation aterm wg2200hp
- nec corporation aterm wg300hp
- nec corporation aterm wg600hp
- nec corporation aterm wr8170n
- nec corporation aterm wr8175n
- nec corporation aterm wr8370n
Show 22 moreShow less
- nec corporation aterm wr8600n
- nec corporation aterm wr8700n
- nec corporation aterm wr8750n
- nec corporation aterm wr9300n
- nec corporation aterm wr9500n
- nec aterm wf300hp firmware
- nec aterm wg1400hp firmware
- nec aterm wg1800hp2 firmware
- nec aterm wg1800hp firmware
- nec aterm wg2200hp firmware
- nec aterm wg2600hp2 firmware
- nec aterm wg2600hp firmware
- nec aterm wg300hp firmware
- nec aterm wg600hp firmware
- nec aterm wr8170n firmware
- nec aterm wr8175n firmware
- nec aterm wr8370n firmware
- nec aterm wr8600n firmware
- nec aterm wr8700n firmware
- nec aterm wr8750n firmware
- nec aterm wr9300n firmware
- nec aterm wr9500n firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-3330 is a medium vulnerability (CVSS 4.3) in Nec Corporation Aterm Wg2600hp, published June 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. No source names a fixed version.