PatchTheCVEaterm vulnerabilities
Recent CVEs affecting aterm products. 7 tracked.
aterm has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2021-04-26. Highest priority: CVE-2017-12575 (score 52/100).
- CVE-2021-20710 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to
- CVE-2021-20622 MEDIUM 6.1 UPGRADE UPGRADE Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmwa
- CVE-2021-20621 HIGH 8.8 UPGRADE UPGRADE Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2
- CVE-2021-20620 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to i
- CVE-2017-12575 HIGH 7.5 MITIGATE An issue was discovered on the NEC Aterm WG2600HP2 1.0.2
- CVE-2016-1168 HIGH 8.8 UPGRADE Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier
- CVE-2016-1167 HIGH 8.8 UPGRADE Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack
FAQ
How do I fix aterm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is aterm being exploited right now?
None of the tracked aterm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which aterm CVE should I patch first?
CVE-2017-12575 currently ranks highest (52/100): An issue was discovered on the NEC Aterm WG2600HP2 1.0.2.