Auth bypass in Nec Corporation Gb1200pe
CVE-2025-0355
Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the network.
Vulnerability class: Broken Authentication
EPSS: 0.005 (41.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Nec Corporation Gb1200pe — versions Ver.1.3.0 and earlier
- Nec Corporation Wf1200cr — versions Ver.1.6.0 and earlier
- Nec Corporation Wg1200cr — versions Ver.1.5.0 and earlier
- Nec Corporation Wg2600hm4 — versions Ver.1.4.2 and earlier
- Nec Corporation Wg2600hp4 — versions Ver.1.4.2 and earlier
- Nec Corporation Wg2600hs — versions Ver.1.7.2 and earlier
- Nec Corporation Wg2600hs2 — versions Ver.1.3.2 and earlier
- Nec Corporation Wx3000hp — versions Ver.2.4.2 and earlier
- Nec Corporation Wx4200d5 — versions Ver.1.2.4 and earlier
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-0355?
- CVE-2025-0355 is a high-severity vulnerability in Nec Corporation Gb1200pe, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2025-01-15.
- How severe is CVE-2025-0355?
- High severity. CVSS v3 base score is 7.5 out of 10.