SARA / Free Tools / CVE / CVE-2023-3333

CVE-2023-3333 — Improper Neutralization of Special Elements used in an OS Command vulnerability

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions

CVSS
— —
EPSS
8.00% (top 76.80%)
CWE
CWE-78
Published
2023-06-28T01:33:27.976Z
Last modified
2024-12-04T20:54:19.552Z
CVSS vector
—

01What is this vulnerability?

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege…

02Affected products

VendorProductVersions
NEC CorporationAterm WG2600HP2all versions
NEC CorporationAterm WG2600HPall versions
NEC CorporationAterm WG2200HPall versions
NEC CorporationAterm WG2200HPall versions
NEC CorporationAterm WG1800HP2all versions
NEC CorporationAterm WG1800HPall versions
NEC CorporationAterm WG1400HPall versions
NEC CorporationAterm WG600HPall versions
NEC CorporationAterm WG300HPall versions
NEC CorporationAterm WF300HPall versions
NEC CorporationAterm WR9500Nall versions
NEC CorporationAterm WR9300Nall versions
NEC CorporationAterm WR8750Nall versions
NEC CorporationAterm WR8700Nall versions
NEC CorporationAterm WR8600Nall versions
NEC CorporationAterm WR8370Nall versions
NEC CorporationAterm WR8175Nall versions
NEC CorporationAterm WR8170Nall versions

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

Open in Sigma generator →

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →
EPSS detail → Search KEV → Ask SARA →