CVE-2023-3330

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
NEC CorporationAterm WG2600HP2all versions
NEC CorporationAterm WG2600HPall versions
NEC CorporationAterm WG2200HPall versions
NEC CorporationAterm WG2200HPall versions
NEC CorporationAterm WG1800HP2all versions
NEC CorporationAterm WG1800HPall versions
NEC CorporationAterm WG1400HPall versions
NEC CorporationAterm WG600HPall versions
NEC CorporationAterm WG300HPall versions
NEC CorporationAterm WF300HPall versions
NEC CorporationAterm WR9500Nall versions
NEC CorporationAterm WR9300Nall versions
NEC CorporationAterm WR8750Nall versions
NEC CorporationAterm WR8700Nall versions
NEC CorporationAterm WR8600Nall versions
NEC CorporationAterm WR8370Nall versions
NEC CorporationAterm WR8175Nall versions
NEC CorporationAterm WR8170Nall versions

References

Timeline

Published
Jun 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-333005.3A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlCVE-2023-333014.3An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a restricted resource fromCVE-2023-333028.8A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface versionCVE-2023-333038.1A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthorized code or commands CVE-2023-333045.5A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass sCVE-2023-333056.5A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.CVE-2023-333066.5A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allCVE-2023-333076.5A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to dCVE-2023-333089.8A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy versiCVE-2023-333096.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Awesome Motive Duplicator Pro plugin <= 4.5.11 versions.CVE-2023-33315.4Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG18CVE-2023-333106.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Valiano Unite Gallery Lite allows PHP Local
CVE-2023-3330: Medium severity, CVSS 4.3 | Vulnix