Vulnerability in Aterm WG1200HP Firmware Allows Command Execution
CVE-2018-0628

7.2HIGH

Key Information:

Vendor

Nec Corporation

Status
Wg1200HP
Vendor
CVE Published:
9 January 2019

What is CVE-2018-0628?

The Aterm WG1200HP firmware, specifically version 1.0.31 and earlier, is susceptible to an arbitrary command execution vulnerability. This flaw allows an attacker with administrator rights to exploit the device by sending crafted HTTP requests, leading to the execution of arbitrary operating system commands. This can potentially compromise the integrity and availability of the device, allowing unauthorized control and manipulation of its functionalities.

Affected Version(s)

WG1200HP firmware Ver1.0.31 and earlier

References

https://jpn.nec.com/security-info/secinfo/nv18-011.html
x_refsource_MISC
https://jvn.jp/en/jp/JVN00401783/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.