CVE-2024-28012
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 28, 2024
Updated: Jan 14, 2025
CWE ID 287
Summary
CVE-2024-28012 is a critical authentication vulnerability affecting multiple NEC Corporation devices, including Aterm WG1800HP4, WG1200HS3, and others. An attacker can exploit this weakness to execute arbitrary commands with root privilege over the internet. The vulnerability stems from improper authentication processing, allowing unauthorized access to affected systems. Devices running affected versions should be updated immediately to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.