CVE-2018-0629

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response...

CVE-2018-0632

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response...

CVE-2018-0637

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter...

CVE-2018-0625

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter...

CVE-2018-0639

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via toolsfirmware.cgi date parameter, time parameter, and offset parameter...

CVE-2018-0639

The CVE-2018-0639 issue affects NEC Aterm HC100RC devices (firmware version 1.0.1 and earlier). A command-injection vulnerability exists in the device’s OS that can be exploited by an administrator to execute arbitrary OS commands via the tools_firmware.cgi parameters date, time, and offset. JVN ...

CVE-2018-0637

Aterm HC100RC (NEC) firmware Ver1.0.1 and earlier is affected by CVE-2018-0637 (OS command injection). The vulnerability allows an attacker with administrator privileges to execute arbitrary OS commands via the export.cgi encKey parameter. Impact is execution of commands with high integrity on de...

CVE-2018-0635

The CVE concerns NEC Aterm HC100RC devices (firmware Ver1.0.1 and earlier). The vulnerability is OS command injection via the filename parameter, exploitable by an attacker with administrator rights to run arbitrary commands. Affected component/condition: command injection in the web/firmware han...

CVE-2018-0636

The affected product is NEC Aterm HC100RC (firmware version 1.0.1 and earlier). The vulnerability is an OS command injection that can be exploited by an attacker with administrator rights via the FactoryPassword parameter in a specific URL (distinct from CVE-2018-0634). Publicly reported CNVD ent...

CVE-2018-16194

CVE-2018-16194 affects NEC Aterm WF1200CR and Aterm WG1200CR routers. Affected firmware versions are WF1200CR 1.1.1 and earlier and WG1200CR 1.0.1 and earlier. The vulnerability is an OS command injection that can be exploited by an authenticated attacker to execute arbitrary operating system com...

CVE-2018-16195

CVE-2018-16195 affects NEC Aterm WF1200CR (firmware 1.1.1 and earlier) and Aterm WG1200CR (firmware 1.0.1 and earlier). The vulnerability is an OS command injection via the SOAP interface of UPnP, enabling an attacker on the same network segment to execute arbitrary OS commands. Impact is high (r...

CVE-2018-16193

CVE-2018-16193 is a stored cross-site scripting vulnerability in NEC Aterm WF1200CR and Aterm WG1200CR routers. The flaw affects WF1200CR firmware versions 1.1.1 and earlier and WG1200CR firmware 1.0.1 and earlier, enabling an attacker with authenticated access to inject arbitrary web scripts via...

CVE-2018-0633

CVE-2018-0633 concerns NEC Aterm W300P wireless router. The issue is a buffer overflow in the device’s handling of the submit-url parameter in Ver1.0.13 and earlier, which can allow an attacker with administrative privileges to execute arbitrary code. Affected product: Aterm W300P (NEC). Root cau...

CVE-2018-0638

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter...

CVE-2018-0633

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter...

NEC Aterm WF1200CR and Aterm WG1200CR Operating System Command Injection Vulnerability (CNVD-2018-25741)

The NEC Aterm WF1200CR and Aterm WG1200CR are both router products from Nippon Electric NEC. An operating system command injection vulnerability exists in the NEC Aterm WF1200CR with firmware version 1.1.1 and earlier and the Aterm WG1200CR with firmware version 1.0.1 and earlier, which can be...

NEC Aterm WF1200CR and Aterm WG1200CR Information Disclosure Vulnerability

The NEC Aterm WF1200CR and Aterm WG1200CR are both router products from Nippon Electric NEC. An information disclosure vulnerability exists in the NEC Aterm WF1200CR with firmware version 1.1.1 and earlier and the Aterm WG1200CR with firmware version 1.0.1 and earlier, which can be exploited by a...

Multiple vulnerabilities in Aterm WF1200CR and Aterm WG1200CR

Overview Aterm WF1200CR and Aterm WG1200CR provided by NEC Corporation contain multiple vulnerabilities listed below. Information disclosure CWE-200 - CVE-2018-16192 Stored cross-site scripting CWE-79 - CVE-2018-16193 OS command injection CWE-78 - CVE-2018-16194 OS command injection in SOAP...

JVN#87535892: Multiple vulnerabilities in Aterm WF1200CR and Aterm WG1200CR

Aterm WF1200CR and Aterm WG1200CR provided by NEC Corporation contain multiple vulnerabilities listed below. Information disclosure CWE-200 - CVE-2018-16192 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base Score: 4.3 CVSS v2|...

NEC Aterm WG2600HP2 Incorrect Access Control Vulnerability

NEC Aterm WG2600HP2 wireless LAN router is prone to an incorrect access control vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...