Medium severity5.4NVD Advisory· Published Jan 9, 2019· Updated Jun 17, 2026

CVE-2018-16193

Description

Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NEC/Aterm Wf1200cr Firmware
cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.1
NEC/Aterm Wg1200cr Firmware
cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.1
Aterm/WF1200CRllm-create
Range: <=Ver1.1.1
Aterm/WG1200CRllm-create
Range: <=Ver1.0.1
NEC/Aterm WF1200CRSllm-fuzzy2 versions
<=Ver1.1.1+ 1 more
- (no CPE)range: <=Ver1.1.1
- (no CPE)range: (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier)

Patches

Vulnerability mechanics

References

jpn.nec.com/security-info/secinfo/nv18-021.htmlnvdVendor Advisory
jvn.jp/en/jp/JVN87535892/index.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000