Nec: Security Vulnerabilities
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.
CVSS Score
7.2
EPSS Score
0.006
Published
2019-01-09
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.
CVSS Score
7.2
EPSS Score
0.02
Published
2019-01-09
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date parameter, time parameter, and offset parameter.
CVSS Score
7.2
EPSS Score
0.02
Published
2019-01-09
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter.
CVSS Score
7.2
EPSS Score
0.007
Published
2019-01-09
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter.
CVSS Score
7.2
EPSS Score
0.007
Published
2019-01-09
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter.
CVSS Score
7.2
EPSS Score
0.007
Published
2019-01-09
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response.
CVSS Score
7.2
EPSS Score
0.007
Published
2019-01-09
Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response.
CVSS Score
7.2
EPSS Score
0.007
Published
2019-01-09
Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter.
CVSS Score
7.2
EPSS Score
0.007
Published
2019-01-09
Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter.
CVSS Score
7.2
EPSS Score
0.007
Published
2019-01-09