CVE-2025-0355
First published: Wed Jan 15 2025(Updated: )
Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the network.
Credit: psirt-info@cyber.jp.nec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Aterm WG2600HS firmware | <1.7.2 | |
| NEC WF1200CRS | <1.6.0 | |
| NEC WG1200CRS | <1.5.0 | |
| NEC GB1200PE | <1.3.0 | |
| NEC WG2600HP4 | <1.4.2 | |
| NEC WG2600HM4 | <1.4.2 | |
| NEC WG2600HS2 | <1.3.2 | |
| NEC WX3000HP | <2.4.2 | |
| NEC WX4200D5 | <1.2.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0355?
CVE-2025-0355 is considered a critical vulnerability due to its potential exploitation without authentication.
How do I fix CVE-2025-0355?
To fix CVE-2025-0355, upgrade your NEC device firmware to the latest version that addresses the authentication issue.
Which NEC products are affected by CVE-2025-0355?
CVE-2025-0355 affects several NEC products including Aterm WG2600HS, WF1200CRS, WG1200CRS, and others listed in the vulnerability description.
What happens if I don't address CVE-2025-0355?
If CVE-2025-0355 is not addressed, attackers could gain unauthorized access to critical functions of the affected NEC devices.
Is there a workaround for CVE-2025-0355?
Currently, there are no documented workarounds for CVE-2025-0355 other than upgrading to a patched firmware version.
- agent/references
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/severity
- agent/event
- agent/author
- agent/source
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/description
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/nec
- canonical/aterm wg2600hs firmware
- canonical/nec wf1200crs
- canonical/nec wg1200crs
- canonical/nec gb1200pe
- canonical/nec wg2600hp4
- canonical/nec wg2600hm4
- canonical/nec wg2600hs2
- canonical/nec wx3000hp
- canonical/nec wx4200d5