3 matches found
Sql injection
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via toolsfirmware.cgi date parameter, time parameter, and offset parameter...
9CVSS7.2AI score0.01399EPSS
SaveExploits0References2Affected Software1
CVE-2018-0639
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via toolsfirmware.cgi date parameter, time parameter, and offset parameter...
7.3AI score0.01399EPSS
SaveExploits0References2
CVE-2018-0639: Improper Neutralization of Special Elements used in an OS Command
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via toolsfirmware.cgi date parameter, time parameter, and offset parameter...
9CVSS6.3AI score0.01399EPSS
SaveExploits0References2
20