CVE-2018-0637

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter...

Design/Logic Flaw

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...

Design/Logic Flaw

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...

CVE-2018-0627

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...

CVE-2018-0625

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter...

CVE-2018-0626

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...

CVE-2018-0629

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response...

CVE-2018-0628

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response...

CVE-2018-0626

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...

CVE-2018-16194

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0636

The affected product is NEC Aterm HC100RC (firmware version 1.0.1 and earlier). The vulnerability is an OS command injection that can be exploited by an attacker with administrator rights via the FactoryPassword parameter in a specific URL (distinct from CVE-2018-0634). Publicly reported CNVD ent...

CVE-2018-16167

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

PT-2019-8686

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This is achieved via the import.cgi API endpoint, specifically by manipulating the encKey parameter...

PT-2019-8676

Name of the Vulnerable Software and Affected Versions Aterm WG1200HP firmware versions 1.0.31 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via HTTP request and response. Recommendations For Aterm WG1200HP firmware versions 1.0.31...

PT-2019-8677

Name of the Vulnerable Software and Affected Versions Aterm W300P versions 1.0.13 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via HTTP request and response. Recommendations For Aterm W300P versions 1.0.13 and earlier, at the...

PT-2019-8684

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via the FactoryPassword parameter of a certain URL. Recommendations For Aterm HC100RC version 1.0.1 and...

PT-2019-8683

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via the filename parameter. Recommendations For Aterm HC100RC version 1.0.1 and earlier, avoid using th...

PT-2019-8687

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the tools firmware.cgi endpoint, specifically by manipulating the date...

PT-2019-8682

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the FactoryPassword parameter or bootmode parameter of a certain URL...

PT-2019-9261

Name of the Vulnerable Software and Affected Versions Aterm WF1200CR versions 1.1.1 and earlier Aterm WG1200CR versions 1.0.1 and earlier Description The issue allows an attacker on the same network segment to execute arbitrary OS commands via the SOAP interface of UPnP. Recommendations For Aterm...