Most recent entries from all

EUVD-2026-226899

fkie_cve-2025-0354

Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to inject an arbitrary script via the network.

GHSA-qgh2-59hq-68f3

jvndb-2025-000002

Aterm series provided by NEC Corporation contains multiple vulnerabilities listed below. <ul> <li>Stored Cross-site Scripting (CWE-79) - CVE-2025-0354</li> <li>Missing Authentication for Critical Function (CWE-306) - CVE-2025-0355</li> <li>OOS Command Injection (CWE-78) - CVE-2025-0356</li> </ul> CVE-2025-0354, CVE-2025-0355 Takayuki Sasaki and Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2025-0356 Kakeru Kajihara of NTT Security Holdings reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.