CVE-2018-0628

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response...

CVE-2018-0634

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmode parameter of a certain URL...

CVE-2018-0636

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certain URL, different URL from CVE-2018-0634...

CVE-2018-16194

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0627

The CVE-2018-0627 entry concerns NEC Aterm WG1200HP routers with firmware versions 1.0.31 and earlier. A command-injection vulnerability allows an attacker with administrative rights to execute arbitrary OS commands via the targetAPSsid parameter. Documented impacts indicate high-severity exposur...

CVE-2018-0627

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...

CVE-2018-0635

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter...

CVE-2018-0626

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...

CVE-2018-0641

Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via toolssystem.cgi date parameter, time parameter, and offset parameter...

CVE-2018-16193

Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0630

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter...

CVE-2018-0640

Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter...

CVE-2018-0631

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...

CVE-2018-0626

The CVE-2018-0626 entry concerns NEC Aterm WG1200HP routers. Affected firmware: Version 1.0.31 and earlier. Vulnerability: an OS command injection via the sysCmd parameter in formWsc, exploitable by an attacker with administrator rights to execute arbitrary OS commands. Impact is demonstrated as ...

CVE-2018-0632

CVE-2018-0632 is a Buffer Overflow affecting NEC Aterm W300P firmware v1.0.13 and earlier. An attacker with administrative rights could execute arbitrary code via HTTP requests/responses. Multiple connected sources (CNVD-2019-01105, JVN entries, and CVE listings) corroborate that the vulnerabilit...

CVE-2018-0631

CVE-2018-0631 affects the NEC Aterm W300P router (firmware version: Ver1.0.13 and earlier). The vulnerability allows an attacker with administrative privileges to execute arbitrary operating system commands via the targetAPSsid parameter. Underlying issue is a command injection flaw in the device...

CVE-2018-0629

Aterm W300P (NEC) firmware Ver1.0.13 and earlier is affected by CVE-2018-0629. The vulnerability is an OS command injection (CWE-78) in the device’s HTTP handling that allows an administrator-level attacker to execute arbitrary commands on the OS via HTTP requests/responses. The impact is elevate...

CVE-2018-0641

The CVE-2018-0641 issue affects NEC Aterm HC100RC devices (firmware version 1.0.1 and earlier). A buffer overflow in the web interface (tools_system.cgi) via the date, time, and offset parameters allows an administrator-restricted attacker to execute arbitrary code. Connected sources (CNVD-2019-0...

CVE-2018-0640

CVE-2018-0640; Aterm HC100RC devices (firmware v1.0.1 and earlier) are affected by a buffer overflow in netWizard.cgi through date, time, and offset parameters. This allows an administrator to execute arbitrary code. Connected sources corroborate the affected product and vulnerability class (buff...

CVE-2018-16192

CVE-2018-16192 affects NEC Aterm WF1200CR and Aterm WG1200CR (firmware 1.1.1 and earlier / 1.0.1 and earlier). The connected sources confirm an information disclosure vulnerability exploitable by an attacker on the same network segment, exposing registered device information via unspecified vecto...