CVE-2018-0625
Description
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Aterm WG1200HP firmware ≤1.0.31 allows authenticated admin to execute arbitrary OS commands via formSysCmd.
Vulnerability
The vulnerability exists in Aterm WG1200HP firmware version Ver1.0.31 and earlier. It is an OS command injection in the formSysCmd parameter that can be exploited by an attacker with administrator rights. [1]
Exploitation
An attacker must have administrative access to the affected device. By sending a crafted request containing OS commands in the formSysCmd parameter, arbitrary commands can be executed. [1]
Impact
Successful exploitation allows an attacker with admin privileges to execute arbitrary OS commands, leading to full compromise of the device's confidentiality, integrity, and availability. [1]
Mitigation
NEC Corporation has released a firmware update. Users should apply the latest firmware as per the vendor's information. [1]
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2<=1.0.31+ 1 more
- (no CPE)range: <=1.0.31
- (no CPE)range: firmware Ver1.0.31 and earlier
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- jvn.jp/en/jp/JVN00401783/index.htmlmitrethird-party-advisoryx_refsource_JVN
- jpn.nec.com/security-info/secinfo/nv18-011.htmlmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.