CVE-2024-28014 — Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command via the internet

Back Back to CVE browser

CRITICAL

Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command via the internet

Published Mar 28, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.69%

Description

Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to execute an arbitrary command via the internet.

Affected products

Vendor NEC Corporation Product MR01LN Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product MR02LN Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product W1200ex(-Ms) Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WF1200HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WF300HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WF300HP2 Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WF800HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WG1200HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WG1200HS Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WG1400HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WG1800HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product Wg1810hp(je) Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product Wg1810hp(mf) Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WG1900HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WG2200HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WG300HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WG600HP Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WM3400RN Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product WM3450RN Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -
Vendor NEC Corporation Product n/a Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Date	Score	Percentile	Model
Oct 1, 2026	0.69% (0.00689)	50.98th	v5 (v2026.06.15)
Jun 15, 2026	0.69% (0.00689)	47.71th	v5 (v2026.06.15)
Mar 17, 2025	0.33% (0.00326)	53.32th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	10.81th	v3 (v2023.03.01)
Mar 28, 2024	0.04% (0.00043)	7.50th	v3 (v2023.03.01)

Description

Affected products

Remediation

Metrics

Score over time

Percentile over time

References (2)

Change history (0)