CVE-2025-0354

Summary

CVE-2025-0354 is a cross-site scripting (XSS) vulnerability affecting multiple NEC Corporation terminal models, including Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier, and WX4200D5 Ver.1.2.4 and earlier. This issue permits an attacker to inject malicious scripts into web pages viewed by other users, potentially leading to stolen information, unauthorized account access, or system damage. This vulnerability poses a significant risk to organizations using these terminals and necessitates immediate patching or mitigation efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.