CVE-2018-0637

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter...

CVE-2018-16167

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0626

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...

CVE-2018-16194

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0636

The affected product is NEC Aterm HC100RC (firmware version 1.0.1 and earlier). The vulnerability is an OS command injection that can be exploited by an attacker with administrator rights via the FactoryPassword parameter in a specific URL (distinct from CVE-2018-0634). Publicly reported CNVD ent...

PT-2019-8682

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the FactoryPassword parameter or bootmode parameter of a certain URL...

PT-2019-8686

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This is achieved via the import.cgi API endpoint, specifically by manipulating the encKey parameter...

CVE-2018-0635: Improper Neutralization of Special Elements used in an OS Command

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter...

PT-2019-8678

Name of the Vulnerable Software and Affected Versions Aterm W300P versions 1.0.13 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the sysCmd parameter. Recommendations For Aterm W300P versions 1.0.13 and...

CVE-2018-0630: Improper Neutralization of Special Elements used in an OS Command

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter...

PT-2019-8675

Name of the Vulnerable Software and Affected Versions Aterm WG1200HP firmware version 1.0.31 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via the targetAPSsid parameter. Recommendations For Aterm WG1200HP firmware version 1.0.31 a...

PT-2019-9261

Name of the Vulnerable Software and Affected Versions Aterm WF1200CR versions 1.1.1 and earlier Aterm WG1200CR versions 1.0.1 and earlier Description The issue allows an attacker on the same network segment to execute arbitrary OS commands via the SOAP interface of UPnP. Recommendations For Aterm...

PT-2019-8684

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via the FactoryPassword parameter of a certain URL. Recommendations For Aterm HC100RC version 1.0.1 and...

PT-2019-8687

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the tools firmware.cgi endpoint, specifically by manipulating the date...

PT-2019-8683

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via the filename parameter. Recommendations For Aterm HC100RC version 1.0.1 and earlier, avoid using th...

PT-2019-8676

Name of the Vulnerable Software and Affected Versions Aterm WG1200HP firmware versions 1.0.31 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via HTTP request and response. Recommendations For Aterm WG1200HP firmware versions 1.0.31...

PT-2019-9260

Name of the Vulnerable Software and Affected Versions Aterm WF1200CR versions 1.1.1 and earlier Aterm WG1200CR versions 1.0.1 and earlier Description The issue allows authenticated attackers to execute arbitrary OS commands. Recommendations For Aterm WF1200CR versions 1.1.1 and earlier, update to...

PT-2019-9266

Name of the Vulnerable Software and Affected Versions Toshiba Home gateway HEM-GW16A versions 1.2.9 and earlier Toshiba Home gateway HEM-GW26A versions 1.2.9 and earlier Description The issue allows an attacker on the same network segment to login to the administrator's settings screen and change...

PT-2019-8698

Name of the Vulnerable Software and Affected Versions BN-SDWBP3 firmware versions 1.0.9 and earlier Description The issue allows an attacker with administrator rights on the same network segment to execute arbitrary OS commands. The exact vectors used for this exploitation are not specified...

PT-2019-8674

Name of the Vulnerable Software and Affected Versions Aterm WG1200HP firmware version 1.0.31 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the sysCmd in the formWsc parameter. Recommendations For Aterm...