Improper Limitation of a Pathname to a Restricted Directory vulnerability...

0 CVSS

Vulnerability Description

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-3330

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Mr. Taizoh Tsukamoto in Mitsui Bussan Secure Directions, Inc.

References

https://jpn.nec.com/security-info/secinfo/nv23-007_en.html

More from NEC Corporation

View All →

CVE-2025-8153

Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5...

Medium 5.1

CVE-2025-12852

DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All...

High 8.4

CVE-2025-11546

CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and...

Critical 9.3

CVE-2025-0356

NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3...

High 7.2

CVE-2025-0355

Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm...

High 7.5

Affected Vendor

NEC Corporation

View all reports →

Affected Software

Aterm WG2600HP2, Aterm WG2600HP, Aterm WG2200HP, Aterm WG1800HP2, Aterm WG1800HP, Aterm WG1400HP, Aterm WG600HP, Aterm WG300HP, Aterm WF300HP, Aterm WR9500N, Aterm WR9300N, Aterm WR8750N, Aterm WR8700N, Aterm WR8600N, Aterm WR8370N, Aterm WR8175N, Aterm WR8170N

Vulnerable Versions:

all versions