{"id":"CVE-2024-28014","aliases":["EUVD-2024-25188","GHSA-v6qj-65jf-4qvc"],"status":"published","title":"Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3,...","description":"Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command via the internet.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-07","score":0.00689,"percentile":0.52975,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121"],"published":"2024-03-28T00:56:39Z","modified":"2026-06-17T07:20:48Z","products":[{"vendor":"nec","product":"aterm_cr2500p_firmware"},{"vendor":"nec","product":"aterm_mr01ln_firmware"},{"vendor":"nec","product":"aterm_mr02ln_firmware"},{"vendor":"nec","product":"aterm_w1200ex-ms_firmware"},{"vendor":"nec","product":"aterm_w1200ex\\(-ms\\)_firmware"},{"vendor":"nec","product":"aterm_w300p_firmware"},{"vendor":"nec","product":"aterm_wf1200hp2_firmware"},{"vendor":"nec","product":"aterm_wf1200hp_firmware"},{"vendor":"nec","product":"aterm_wf300hp2_firmware"},{"vendor":"nec","product":"aterm_wf300hp_firmware"},{"vendor":"nec","product":"aterm_wf800hp_firmware"},{"vendor":"nec","product":"aterm_wg1200hp2_firmware"},{"vendor":"nec","product":"aterm_wg1200hp3_firmware"},{"vendor":"nec","product":"aterm_wg1200hp_firmware"},{"vendor":"nec","product":"aterm_wg1200hs2_firmware"},{"vendor":"nec","product":"aterm_wg1200hs3_firmware"},{"vendor":"nec","product":"aterm_wg1200hs_firmware"},{"vendor":"nec","product":"aterm_wg1400hp_firmware"},{"vendor":"nec","product":"aterm_wg1800hp2_firmware"},{"vendor":"nec","product":"aterm_wg1800hp3_firmware"},{"vendor":"nec","product":"aterm_wg1800hp4_firmware"},{"vendor":"nec","product":"aterm_wg1800hp_firmware"},{"vendor":"nec","product":"aterm_wg1810hp\\(je\\)_firmware"},{"vendor":"nec","product":"aterm_wg1810hp\\(mf\\)_firmware"},{"vendor":"nec","product":"aterm_wg1900hp2_firmware"},{"vendor":"nec","product":"aterm_wg1900hp_firmware"},{"vendor":"nec","product":"aterm_wg2200hp_firmware"},{"vendor":"nec","product":"aterm_wg300hp_firmware"},{"vendor":"nec","product":"aterm_wg600hp_firmware"},{"vendor":"nec","product":"aterm_wm3400rn_firmware"},{"vendor":"nec","product":"aterm_wm3450rn_firmware"},{"vendor":"nec","product":"aterm_wm3500r_firmware"},{"vendor":"nec","product":"aterm_wm3600r_firmware"},{"vendor":"nec","product":"aterm_wm3800r_firmware"},{"vendor":"nec","product":"aterm_wr1200h_firmware"},{"vendor":"nec","product":"aterm_wr4100n_firmware"},{"vendor":"nec","product":"aterm_wr4500n_firmware"},{"vendor":"nec","product":"aterm_wr6600h_firmware"},{"vendor":"nec","product":"aterm_wr6650s_firmware"},{"vendor":"nec","product":"aterm_wr6670s_firmware"},{"vendor":"nec","product":"aterm_wr7800h_firmware"},{"vendor":"nec","product":"aterm_wr7850s_firmware"},{"vendor":"nec","product":"aterm_wr7870s_firmware"},{"vendor":"nec","product":"aterm_wr8100n_firmware"},{"vendor":"nec","product":"aterm_wr8150n_firmware"},{"vendor":"nec","product":"aterm_wr8160n_firmware"},{"vendor":"nec","product":"aterm_wr8165n_firmware"},{"vendor":"nec","product":"aterm_wr8166n_firmware"},{"vendor":"nec","product":"aterm_wr8170n_firmware"},{"vendor":"nec","product":"aterm_wr8175n_firmware"},{"vendor":"nec","product":"aterm_wr8200n_firmware"},{"vendor":"nec","product":"aterm_wr8300n_firmware"},{"vendor":"nec","product":"aterm_wr8370n_firmware"},{"vendor":"nec","product":"aterm_wr8400n_firmware"},{"vendor":"nec","product":"aterm_wr8500n_firmware"},{"vendor":"nec","product":"aterm_wr8600n_firmware"},{"vendor":"nec","product":"aterm_wr8700n_firmware"},{"vendor":"nec","product":"aterm_wr8750n_firmware"},{"vendor":"nec","product":"aterm_wr9300n_firmware"},{"vendor":"nec","product":"aterm_wr9500n_firmware"},{"vendor":"nec corporation","product":"cr2500p"},{"vendor":"nec corporation","product":"mr01ln"},{"vendor":"nec corporation","product":"mr02ln"},{"vendor":"nec corporation","product":"w1200ex(-ms)"},{"vendor":"nec corporation","product":"w300p"},{"vendor":"nec corporation","product":"wf1200hp"},{"vendor":"nec corporation","product":"wf1200hp2"},{"vendor":"nec corporation","product":"wf300hp"},{"vendor":"nec corporation","product":"wf300hp2"},{"vendor":"nec corporation","product":"wf800hp"},{"vendor":"nec corporation","product":"wg1200hp"},{"vendor":"nec corporation","product":"wg1200hp2"},{"vendor":"nec corporation","product":"wg1200hp3"},{"vendor":"nec corporation","product":"wg1200hs"},{"vendor":"nec corporation","product":"wg1200hs2"},{"vendor":"nec corporation","product":"wg1200hs3"},{"vendor":"nec corporation","product":"wg1400hp"},{"vendor":"nec corporation","product":"wg1800hp"},{"vendor":"nec corporation","product":"wg1800hp2"},{"vendor":"nec corporation","product":"wg1800hp3"},{"vendor":"nec corporation","product":"wg1800hp4"},{"vendor":"nec corporation","product":"wg1810hp(je)"},{"vendor":"nec corporation","product":"wg1810hp(mf)"},{"vendor":"nec corporation","product":"wg1900hp"},{"vendor":"nec corporation","product":"wg1900hp2"},{"vendor":"nec corporation","product":"wg2200hp"},{"vendor":"nec corporation","product":"wg300hp"},{"vendor":"nec corporation","product":"wg600hp"},{"vendor":"nec corporation","product":"wm3400rn"},{"vendor":"nec corporation","product":"wm3450rn"},{"vendor":"nec corporation","product":"wm3500r"},{"vendor":"nec corporation","product":"wm3600r"},{"vendor":"nec corporation","product":"wm3800r"},{"vendor":"nec corporation","product":"wr1200h"},{"vendor":"nec corporation","product":"wr4100n"},{"vendor":"nec corporation","product":"wr4500n"},{"vendor":"nec corporation","product":"wr6600h"},{"vendor":"nec corporation","product":"wr6650s"},{"vendor":"nec corporation","product":"wr6670s"},{"vendor":"nec corporation","product":"wr7800h"},{"vendor":"nec corporation","product":"wr7850s"},{"vendor":"nec corporation","product":"wr7870s"},{"vendor":"nec corporation","product":"wr8100n"},{"vendor":"nec corporation","product":"wr8150n"},{"vendor":"nec corporation","product":"wr8160n"},{"vendor":"nec corporation","product":"wr8165n"},{"vendor":"nec corporation","product":"wr8166n"},{"vendor":"nec corporation","product":"wr8170n"},{"vendor":"nec corporation","product":"wr8175n"},{"vendor":"nec corporation","product":"wr8200n"},{"vendor":"nec corporation","product":"wr8300n"},{"vendor":"nec corporation","product":"wr8370n"},{"vendor":"nec corporation","product":"wr8400n"},{"vendor":"nec corporation","product":"wr8500n"},{"vendor":"nec corporation","product":"wr8600n"},{"vendor":"nec corporation","product":"wr8700n"},{"vendor":"nec corporation","product":"wr8750n"},{"vendor":"nec corporation","product":"wr9300n"},{"vendor":"nec corporation","product":"wr9500n"}],"references":[{"url":"https://jpn.nec.com/security-info/secinfo/nv24-001_en.html","tags":["Vendor Advisory"]},{"url":"https://https://jpn.nec.com/security-info/secinfo/nv24-001_en.html","tags":["x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28014"},{"url":"https://github.com/advisories/GHSA-v6qj-65jf-4qvc"}],"sources":{"cve":[{"id":"CVE-2024-28014","description":"Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command via the internet.","status":"published","published":"2024-03-28T00:56:39.075Z","modified":"2025-01-14T04:05:52.531Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-121","CWE-121"],"updated_at":"2026-11-02T14:34:18.597034Z"}],"euvd":[{"id":"EUVD-2024-25188","description":"Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command via the internet.","status":"published","published":"2024-03-28T00:56:39Z","modified":"2025-01-14T04:05:52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:20.377491Z"}],"ghsa":[{"id":"GHSA-v6qj-65jf-4qvc","title":"Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3,...","description":"Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN and MR02LN all versions allows a attacker to execute an arbitrary command via the internet.","status":"published","published":"2024-03-28T03:30:59Z","modified":"2025-01-14T06:33:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:59:29.545169Z"}],"nvd":[{"id":"CVE-2024-28014","description":"Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command via the internet.","status":"published","published":"2024-03-28T01:15:47.773Z","modified":"2026-06-17T07:20:48.433Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:09:44.124823Z"}]}}