Deviceways

Router

NEC Aterm WG2600HP2

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.

Release listed · 25.12.6

Get OpenWrt firmwarefirmware-selector.openwrt.org
Original project github.com
First installation
TFTP generic
Sources

Features & details

Check the project and hardware shown for each feature.

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
TFTP generic
Availability recorded by source
Discontinued 2018

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Aterm WG2600HP2

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP,…

CVE-2023-3333

Affected firmware
all versions
Fix
Fix details in the linked record
Read NEC CVE record
Details and sources
CVE updated

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.

https — Aterm WG2600HP2 (https) ↗
CVE published

Aterm WG2600HP2

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP,…

CVE-2023-3332

Affected firmware
all versions
Fix
Fix details in the linked record
Read NEC CVE record
Details and sources
CVE updated

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to

execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.

https — Aterm WG2600HP2 (https) ↗
CVE published

Aterm WG2600HP2

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP,…

CVE-2023-3331

Affected firmware
all versions
Fix
Fix details in the linked record
Read NEC CVE record
Details and sources
CVE updated

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete

specific files in the product.

https — Aterm WG2600HP2 (https) ↗
CVE published

Aterm WG2600HP2

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP,…

CVE-2023-3330

Affected firmware
all versions
Fix
Fix details in the linked record
Read NEC CVE record
Details and sources
CVE updated

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.

Security advisory nv23 007 en — Aterm WG2600HP2 (jpn.nec.com) ↗
CVE published

NEC Aterm WG2600HP2

An issue was discovered on the NEC Aterm WG2600HP2 1.0.2

CVE-2017-12575

Affected firmware
Aterm WG2600HP2: 1.0.2. The
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don't require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmware version, and network status (ex.: curl -X http://[IP]/aterm_httpif.cgi/negotiate -d "REQ_ID=SUPPORT_IF_GET").

Check more security advisories for this device · CVE.org