CVE-2018-0630

The CVE-2018-0630 issue affects NEC Aterm W300P routers (firmware Ver1.0.13 and earlier). A command-injection flaw exists in the sysCmd parameter that allows an authenticated administrator to execute arbitrary OS commands on the device. Impact is elevated due to administrative access required; ex...

CVE-2018-0628

CVE-2018-0628 concerns NEC Aterm WG1200HP router. Connected sources confirm multiple OS command injection vulnerabilities (CWE-78) in WG1200HP firmware Ver1.0.31 and earlier, allowing an administrator to execute arbitrary OS commands via HTTP requests/responses. Impact: arbitrary command executio...

CVE-2018-0638

The CVE-2018-0638 issue affects NEC/Aterm HC100RC devices (firmware Ver1.0.1 and earlier). A local-administrator level attacker can exploit an OS command injection via the import.cgi encKey parameter to execute arbitrary commands on the underlying OS. The vulnerability arises in the product’s web...

CVE-2018-0631

CVE-2018-0631 affects the NEC Aterm W300P router (firmware version: Ver1.0.13 and earlier). The vulnerability allows an attacker with administrative privileges to execute arbitrary operating system commands via the targetAPSsid parameter. Underlying issue is a command injection flaw in the device...

CVE-2018-0640

CVE-2018-0640; Aterm HC100RC devices (firmware v1.0.1 and earlier) are affected by a buffer overflow in netWizard.cgi through date, time, and offset parameters. This allows an administrator to execute arbitrary code. Connected sources corroborate the affected product and vulnerability class (buff...

CVE-2018-0626

The CVE-2018-0626 entry concerns NEC Aterm WG1200HP routers. Affected firmware: Version 1.0.31 and earlier. Vulnerability: an OS command injection via the sysCmd parameter in formWsc, exploitable by an attacker with administrator rights to execute arbitrary OS commands. Impact is demonstrated as ...

CVE-2018-0629

Aterm W300P (NEC) firmware Ver1.0.13 and earlier is affected by CVE-2018-0629. The vulnerability is an OS command injection (CWE-78) in the device’s HTTP handling that allows an administrator-level attacker to execute arbitrary commands on the OS via HTTP requests/responses. The impact is elevate...

CVE-2018-0627

The CVE-2018-0627 entry concerns NEC Aterm WG1200HP routers with firmware versions 1.0.31 and earlier. A command-injection vulnerability allows an attacker with administrative rights to execute arbitrary OS commands via the targetAPSsid parameter. Documented impacts indicate high-severity exposur...

CVE-2018-0627

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...

CVE-2018-0626

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...

CVE-2018-0631

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...

CVE-2018-0630

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter...

CVE-2018-0641

Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via toolssystem.cgi date parameter, time parameter, and offset parameter...

CVE-2018-0640

Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter...

CVE-2018-0635

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter...

CVE-2018-0632

CVE-2018-0632 is a Buffer Overflow affecting NEC Aterm W300P firmware v1.0.13 and earlier. An attacker with administrative rights could execute arbitrary code via HTTP requests/responses. Multiple connected sources (CNVD-2019-01105, JVN entries, and CVE listings) corroborate that the vulnerabilit...

CVE-2018-16194

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-16193

Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-16192

CVE-2018-16192 affects NEC Aterm WF1200CR and Aterm WG1200CR (firmware 1.1.1 and earlier / 1.0.1 and earlier). The connected sources confirm an information disclosure vulnerability exploitable by an attacker on the same network segment, exposing registered device information via unspecified vecto...

CVE-2018-0641

The CVE-2018-0641 issue affects NEC Aterm HC100RC devices (firmware version 1.0.1 and earlier). A buffer overflow in the web interface (tools_system.cgi) via the date, time, and offset parameters allows an administrator-restricted attacker to execute arbitrary code. Connected sources (CNVD-2019-0...