CVE-2023-3333
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP,…
- 7.2HighCVSS base score
- 0.71%Exploitation in 30 daysEPSS · top 46% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Timeline
ID reserved
By NEC
- 8 days later
· 8 days later
Published
- 18 months later
· 18 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | High7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.71% · top 46% of all CVEs (10 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.
Affected products
NEC Corporation · Aterm WG2600HP2
- affected all versions
NEC Corporation · Aterm WG2600HP
- affected all versions
NEC Corporation · Aterm WG2200HP
- affected all versions
NEC Corporation · Aterm WG2200HP
- affected all versions
NEC Corporation · Aterm WG1800HP2
- affected all versions
NEC Corporation · Aterm WG1800HP
- affected all versions
NEC Corporation · Aterm WG1400HP
- affected all versions
NEC Corporation · Aterm WG600HP
- affected all versions
NEC Corporation · Aterm WG300HP
- affected all versions
NEC Corporation · Aterm WF300HP
- affected all versions
NEC Corporation · Aterm WR9500N
- affected all versions
NEC Corporation · Aterm WR9300N
- affected all versions
NEC Corporation · Aterm WR8750N
- affected all versions
NEC Corporation · Aterm WR8700N
- affected all versions
NEC Corporation · Aterm WR8600N
- affected all versions
NEC Corporation · Aterm WR8370N
- affected all versions
NEC Corporation · Aterm WR8175N
- affected all versions
NEC Corporation · Aterm WR8170N
- affected all versions
What to do
Workaround: Stop using the products or remove the USB storage.
References
1
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2023-44001 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2023-3333)Record last updated .