Lucene search

Japan Vulnerability NotesJVN:00401783

HistoryJul 12, 2018 - 12:00 a.m.

JVN#00401783: Multiple OS command injection vulnerabilities in Aterm WG1200HP

2018-07-1200:00:00

Japan Vulnerability Notes

jvn.jp

512

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.2%

JSON

Aterm WG1200HP provided by NEC Corporation contains multiple OS command injection vulnerabilities (CWE-78).

Impact

A user who can access the product with administrative privileges may execute an arbitrary OS command.

Solution

Update the Firmware
Apply the latest firmware update according to the information provided by the developer.

Products Affected

WG1200HP firmware Ver1.0.31 and earlier

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.2%

JSON

Related for JVN:00401783