CVE-2018-0634: Improper Neutralization of Special Elements used in an OS Command

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmode parameter of a certain URL...

CVE-2018-0626: Improper Neutralization of Special Elements used in an OS Command

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...

PT-2019-9259

Name of the Vulnerable Software and Affected Versions Aterm WF1200CR versions 1.1.1 and earlier Aterm WG1200CR versions 1.0.1 and earlier Description A cross-site scripting issue allows authenticated attackers to inject arbitrary web script or HTML. Recommendations For Aterm WF1200CR versions 1.1...

CVE-2018-16193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-8678

Name of the Vulnerable Software and Affected Versions Aterm W300P versions 1.0.13 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the sysCmd parameter. Recommendations For Aterm W300P versions 1.0.13 and...

CVE-2018-0629: Improper Neutralization of Special Elements used in an OS Command

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response...

CVE-2018-0633: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter...

CVE-2018-0630: Improper Neutralization of Special Elements used in an OS Command

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter...

CVE-2018-0628: Improper Neutralization of Special Elements used in an OS Command

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response...

CVE-2018-0639: Improper Neutralization of Special Elements used in an OS Command

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via toolsfirmware.cgi date parameter, time parameter, and offset parameter...

CVE-2018-0627: Improper Neutralization of Special Elements used in an OS Command

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...

PT-2019-8675

Name of the Vulnerable Software and Affected Versions Aterm WG1200HP firmware version 1.0.31 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via the targetAPSsid parameter. Recommendations For Aterm WG1200HP firmware version 1.0.31 a...

CVE-2018-0632: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response...

CVE-2018-0631: Improper Neutralization of Special Elements used in an OS Command

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...

CVE-2018-16195: Improper Neutralization of Special Elements used in an OS Command

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows an attacker on the same network segment to execute arbitrary OS commands via SOAP interface of UPnP...

PT-2019-8684

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via the FactoryPassword parameter of a certain URL. Recommendations For Aterm HC100RC version 1.0.1 and...

PT-2019-8687

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the tools firmware.cgi endpoint, specifically by manipulating the date...

PT-2019-8683

Name of the Vulnerable Software and Affected Versions Aterm HC100RC version 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands via the filename parameter. Recommendations For Aterm HC100RC version 1.0.1 and earlier, avoid using th...

PT-2019-8689

Name of the Vulnerable Software and Affected Versions Aterm HC100RC versions 1.0.1 and earlier Description A buffer overflow issue allows an attacker with administrator rights to execute arbitrary code. This is achieved via the "tools system.cgi" endpoint, specifically through the date parameter,...

CVE-2018-0637: Improper Neutralization of Special Elements used in an OS Command

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter...