EUVD-2018-8046

Malware in sbrugna...

EUVD-2018-8047

Malware in sbrugna...

EUVD-2018-8045

Malware in sbrugna...

Input validation

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

CVE-2021-20709

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

CVE-2021-20709

CVE-2021-20709 describes an improper validation of the integrity check value in NEC Aterm WF1200CR (firmware ≤1.3.2), Aterm WG1200CR (≤1.3.3), and Aterm WG2600HS (≤1.5.1). The flaw allows an authenticated/administrative attacker to execute arbitrary OS commands by sending a specially crafted requ...

CVE-2021-20709

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

PT-2021-14167

Name of the Vulnerable Software and Affected Versions: NEC Aterm WF1200CR versions 1.3.2 and earlier NEC Aterm WG1200CR versions 1.3.3 and earlier NEC Aterm WG2600HS versions 1.5.1 and earlier Description: The issue allows authenticated attackers to execute arbitrary OS commands by sending a...

PT-2021-14168

Name of the Vulnerable Software and Affected Versions: NEC Aterm WF1200CR versions 1.3.2 and earlier NEC Aterm WG1200CR versions 1.3.3 and earlier NEC Aterm WG2600HS versions 1.5.1 and earlier Description: The issue is related to improper validation of an integrity check value, allowing an attack...

CVE-2021-20709: Improper Validation of Integrity Check Value

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

Multiple vulnerabilities in Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP

Overview Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP provided by NEC Corporation contain multiple vulnerabilities listed below. Aterm WF1200CR, Aterm WG1200CR, and Aterm WG2600HS OS Command Injection CWE-78 - CVE-2021-20708 Improper Validation of Integrity Check Value CWE-3...

CVE-2020-5525

Aterm series Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen...

CVE-2020-5524: Improper Neutralization of Special Elements used in an OS Command

Aterm series Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via UPnP function...

PT-2020-18499

Name of the Vulnerable Software and Affected Versions Aterm WF1200C versions 1.2.1 and earlier Aterm WG1200CR versions 1.2.1 and earlier Aterm WG2600HS versions 1.3.2 and earlier Description The issue allows an attacker on the same network segment to execute arbitrary OS commands with root...

PT-2020-18500

Name of the Vulnerable Software and Affected Versions Aterm WF1200C versions 1.2.1 and earlier Aterm WG1200CR versions 1.2.1 and earlier Aterm WG2600HS versions 1.3.2 and earlier Description The issue allows an authenticated attacker on the same network segment to execute arbitrary OS commands wi...

NEC Aterm WF1200C, Aterm WG1200CR and Aterm WG2600HS Operating System Command Injection Vulnerability

The NEC Aterm WF1200C and others are a wireless router from Nippon Electric NEC. An operating system command injection vulnerability exists in the NEC Aterm WF1200C 1.2.1 and earlier, Aterm WG1200CR 1.2.1 and earlier, and Aterm WG2600HS 1.3.2 and earlier, where the vulnerability arises from a...

NEC Aterm WF1200C, Aterm WG1200CR and Aterm WG2600HS Operating System Command Injection Vulnerability

The NEC Aterm WF1200C and others are a wireless router from Nippon Electric NEC. An operating system command injection vulnerability exists in the NEC Aterm WF1200C 1.2.1 and earlier, Aterm WG1200CR 1.2.1 and earlier, and Aterm WG2600HS 1.3.2 and earlier, where the vulnerability arises from a...

CVE-2018-16195

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows an attacker on the same network segment to execute arbitrary OS commands via SOAP interface of UPnP...

CVE-2018-16193

Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-16192

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allow an attacker on the same network segment to obtain information registered on the device via unspecified vectors...