Auth bypass in Nec Corporation Gb1200pe
CVE-2025-0355
Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the network.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.005 (43.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 43rd percentile — 43.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Nec Corporation Gb1200pe — versions Ver.1.3.0 and earlier
- Nec Corporation Wf1200cr — versions Ver.1.6.0 and earlier
- Nec Corporation Wg1200cr — versions Ver.1.5.0 and earlier
- Nec Corporation Wg2600hm4 — versions Ver.1.4.2 and earlier
- Nec Corporation Wg2600hp4 — versions Ver.1.4.2 and earlier
- Nec Corporation Wg2600hs — versions Ver.1.7.2 and earlier
- Nec Corporation Wg2600hs2 — versions Ver.1.3.2 and earlier
- Nec Corporation Wx3000hp — versions Ver.2.4.2 and earlier
- Nec Corporation Wx4200d5 — versions Ver.1.2.4 and earlier
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-0355?
- CVE-2025-0355 is a high-severity vulnerability in Nec Corporation Gb1200pe, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2025-01-15.
- How severe is CVE-2025-0355?
- High severity. CVSS v3 base score is 7.5 out of 10.