Most recent entries from all

EUVD-2026-211142

fkie_cve-2025-0355

Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the network.

GHSA-872h-pcfc-25m6

jvndb-2025-000002

Aterm series provided by NEC Corporation contains multiple vulnerabilities listed below. <ul> <li>Stored Cross-site Scripting (CWE-79) - CVE-2025-0354</li> <li>Missing Authentication for Critical Function (CWE-306) - CVE-2025-0355</li> <li>OOS Command Injection (CWE-78) - CVE-2025-0356</li> </ul> CVE-2025-0354, CVE-2025-0355 Takayuki Sasaki and Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2025-0356 Kakeru Kajihara of NTT Security Holdings reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.