Aterm vulnerabilities1 known to be exploited.
Aterm has 11 published vulnerabilities across 41 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Wg2600hp, with 3. If you run Aterm software, patch the exploited flaws first.
The most recent Aterm flaw added to the known-exploited list is CVE-2014-8361, on 18 September 2023. We keep watching the known-exploited list.
Which Aterm products have the most vulnerabilities?
Wg2600hp leads with 3 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Aterm vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Realtek SDK Improper Input Validation Vulnerability
Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.
Which Aterm flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
- 2.3%CVE-2017-12575High
An issue was discovered on the NEC Aterm WG2600HP2 1.0.2.
- 1.8%CVE-2003-0024High
The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu.
- 1.8%CVE-2003-0067High
The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g.
- 1.0%CVE-2021-20622Medium
Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
- 1.0%CVE-2021-20620Medium
Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
- 0.8%CVE-2021-20710Medium
Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
- 0.6%CVE-2021-20621High
Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of...
- 0.6%CVE-2016-1168High
Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users.
- 0.6%CVE-2016-1167High
Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users.
All Aterm products we track.
13 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Atermaterm3 vulnerabilities15 versions
- Wg2600hp2 Firmwarewg2600hp2_firmware3 vulnerabilities1 version
- Wf800hp Firmwarewf800hp_firmware2 vulnerabilities1 version
- W1200ex Firmwarew1200ex_firmware1 vulnerability1 version
- W1200ex-Ms Firmwarew1200ex-ms_firmware1 vulnerability1 version
- Wg1200hp2 Firmwarewg1200hp2_firmware1 vulnerability1 version
- Wg1200hp3 Firmwarewg1200hp3_firmware1 vulnerability1 version
- Wg1200hs2 Firmwarewg1200hs2_firmware1 vulnerability1 version
- Wg1800hp3 Firmwarewg1800hp3_firmware1 vulnerability1 version
- Wg1800hp4 Firmwarewg1800hp4_firmware1 vulnerability1 version
- Wg1900hp Firmwarewg1900hp_firmware1 vulnerability1 version
- Wg1900hp2 Firmwarewg1900hp2_firmware1 vulnerability1 version
- Wg300hp Firmwarewg300hp_firmware1 vulnerability1 version
This directory lists the 13 Aterm products with at least one tracked version, of 41 in our catalogue.
Running Aterm? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.
- Matched to
- Aterm on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 11 published vulnerabilities across 41 products and 27 versions from Aterm. The most recent Aterm flaw added to the known-exploited list is CVE-2014-8361, on 18 September 2023.
1 Aterm vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2014-8361. The full list is on this page.
Wg2600hp, with 3 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Aterm products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.