XSS in Nec Corporation Wg2600hm4
CVE-2025-0354
Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.002 (12.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Nec Corporation Wg2600hm4 — versions Ver.1.4.2 and earlier
- Nec Corporation Wg2600hp4 — versions Ver.1.4.2 and earlier
- Nec Corporation Wg2600hs — versions Ver.1.7.2 and earlier
- Nec Corporation Wg2600hs2 — versions Ver.1.3.2 and earlier
- Nec Corporation Wx3000hp — versions Ver.2.4.2 and earlier
- Nec Corporation Wx4200d5 — versions Ver.1.2.4 and earlier
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-0354?
- CVE-2025-0354 is a medium-severity vulnerability in Nec Corporation Wg2600hm4, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2025-01-15.
- How severe is CVE-2025-0354?
- Medium severity. CVSS v3 base score is 4.8 out of 10.
- Is CVE-2025-0354 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.