CVE-2024-28016
Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...
Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to get device informations via the internet.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to get device informations via the internet.
- Record
CVE-2024-28016- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-284
- Updated
- 2026-11-02
EUVDEUVD-2024-25190
Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to get device informations via the internet.
- Record
EUVD-2024-25190- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8c2-5pg9-qp4h
Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...
Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN and MR02LN all versions allows a attacker to get device informations via the internet.
- Record
GHSA-q8c2-5pg9-qp4h- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-284
- Updated
- 2026-11-02
NVD
Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to get device informations via the internet.
- Record
CVE-2024-28016- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
- nec corporation cr2500p
- nec corporation mr01ln
- nec corporation mr02ln
- nec corporation w1200ex(-ms)
- nec corporation w300p
- nec corporation wf1200hp
- nec corporation wf1200hp2
- nec corporation wf300hp
- nec corporation wf300hp2
- nec corporation wf800hp
- nec corporation wg1200hp
- nec corporation wg1200hp2
Show 106 moreShow less
- nec corporation wg1200hp3
- nec corporation wg1200hs
- nec corporation wg1200hs2
- nec corporation wg1200hs3
- nec corporation wg1400hp
- nec corporation wg1800hp
- nec corporation wg1800hp2
- nec corporation wg1800hp3
- nec corporation wg1800hp4
- nec corporation wg1810hp(je)
- nec corporation wg1810hp(mf)
- nec corporation wg1900hp
- nec corporation wg1900hp2
- nec corporation wg2200hp
- nec corporation wg300hp
- nec corporation wg600hp
- nec corporation wm3400rn
- nec corporation wm3450rn
- nec corporation wm3500r
- nec corporation wm3600r
- nec corporation wm3800r
- nec corporation wr1200h
- nec corporation wr4100n
- nec corporation wr4500n
- nec corporation wr6600h
- nec corporation wr6650s
- nec corporation wr6670s
- nec corporation wr7800h
- nec corporation wr7850s
- nec corporation wr7870s
- nec corporation wr8100n
- nec corporation wr8150n
- nec corporation wr8160n
- nec corporation wr8165n
- nec corporation wr8166n
- nec corporation wr8170n
- nec corporation wr8175n
- nec corporation wr8200n
- nec corporation wr8300n
- nec corporation wr8370n
- nec corporation wr8400n
- nec corporation wr8500n
- nec corporation wr8600n
- nec corporation wr8700n
- nec corporation wr8750n
- nec corporation wr9300n
- nec corporation wr9500n
- nec aterm cr2500p firmware
- nec aterm mr01ln firmware
- nec aterm mr02ln firmware
- nec aterm w1200ex-ms firmware
- nec aterm w300p firmware
- nec aterm wf1200hp2 firmware
- nec aterm wf1200hp firmware
- nec aterm wf300hp2 firmware
- nec aterm wf300hp firmware
- nec aterm wf800hp firmware
- nec aterm wg1200hp2 firmware
- nec aterm wg1200hp3 firmware
- nec aterm wg1200hp firmware
- nec aterm wg1200hs2 firmware
- nec aterm wg1200hs3 firmware
- nec aterm wg1200hs firmware
- nec aterm wg1400hp firmware
- nec aterm wg1800hp2 firmware
- nec aterm wg1800hp3 firmware
- nec aterm wg1800hp4 firmware
- nec aterm wg1800hp firmware
- nec aterm wg1810hp\(je\) firmware
- nec aterm wg1810hp\(mf\) firmware
- nec aterm wg1900hp2 firmware
- nec aterm wg1900hp firmware
- nec aterm wg2200hp firmware
- nec aterm wg300hp firmware
- nec aterm wg600hp firmware
- nec aterm wm3400rn firmware
- nec aterm wm3450rn firmware
- nec aterm wm3500r firmware
- nec aterm wm3600r firmware
- nec aterm wm3800r firmware
- nec aterm wr1200h firmware
- nec aterm wr4100n firmware
- nec aterm wr4500n firmware
- nec aterm wr6600h firmware
- nec aterm wr6650s firmware
- nec aterm wr6670s firmware
- nec aterm wr7800h firmware
- nec aterm wr7850s firmware
- nec aterm wr7870s firmware
- nec aterm wr8100n firmware
- nec aterm wr8150n firmware
- nec aterm wr8160n firmware
- nec aterm wr8165n firmware
- nec aterm wr8166n firmware
- nec aterm wr8170n firmware
- nec aterm wr8175n firmware
- nec aterm wr8200n firmware
- nec aterm wr8300n firmware
- nec aterm wr8370n firmware
- nec aterm wr8400n firmware
- nec aterm wr8500n firmware
- nec aterm wr8600n firmware
- nec aterm wr8700n firmware
- nec aterm wr8750n firmware
- nec aterm wr9300n firmware
- nec aterm wr9500n firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-28016 is a medium vulnerability (CVSS 6.0) in Nec Corporation Cr2500p, published March 28, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. No source names a fixed version.