CVE-2018-0635

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter...

CVE-2018-0635

The CVE concerns NEC Aterm HC100RC devices (firmware Ver1.0.1 and earlier). The vulnerability is OS command injection via the filename parameter, exploitable by an attacker with administrator rights to run arbitrary commands. Affected component/condition: command injection in the web/firmware han...