CVE-2023-3333
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC...
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
- Record
CVE-2023-3333- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List No score
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
- Record
CVE-2023-3333- Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2023-44001
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
- Record
EUVD-2023-44001- CVSS
- 0.0 None
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4cvh-grfr-3h7q
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC...
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2200HP all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
- Record
GHSA-4cvh-grfr-3h7q- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
- nec corporation aterm wg2600hp
- nec corporation aterm wg2600hp2
- nec corporation aterm wf300hp
- nec corporation aterm wg1400hp
- nec corporation aterm wg1800hp
- nec corporation aterm wg1800hp2
- nec corporation aterm wg2200hp
- nec corporation aterm wg300hp
- nec corporation aterm wg600hp
- nec corporation aterm wr8170n
- nec corporation aterm wr8175n
- nec corporation aterm wr8370n
Show 22 moreShow less
- nec corporation aterm wr8600n
- nec corporation aterm wr8700n
- nec corporation aterm wr8750n
- nec corporation aterm wr9300n
- nec corporation aterm wr9500n
- nec aterm wf300hp firmware
- nec aterm wg1400hp firmware
- nec aterm wg1800hp2 firmware
- nec aterm wg1800hp firmware
- nec aterm wg2200hp firmware
- nec aterm wg2600hp2 firmware
- nec aterm wg2600hp firmware
- nec aterm wg300hp firmware
- nec aterm wg600hp firmware
- nec aterm wr8170n firmware
- nec aterm wr8175n firmware
- nec aterm wr8370n firmware
- nec aterm wr8600n firmware
- nec aterm wr8700n firmware
- nec aterm wr8750n firmware
- nec aterm wr9300n firmware
- nec aterm wr9500n firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-3333 is a high vulnerability (CVSS 7.2) in Nec Corporation Aterm Wg2600hp, published June 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. No source names a fixed version.