Aterm HC100RC
by NEC
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-0641 | Hig | 0.47 | 7.2 | 0.02 | Jan 9, 2019 | Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date parameter, time parameter, and offset parameter. | ||
| CVE-2018-0640 | Hig | 0.47 | 7.2 | 0.02 | Jan 9, 2019 | Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter. | ||
| CVE-2018-0639 | Hig | 0.47 | 7.2 | 0.01 | Jan 9, 2019 | Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter. | ||
| CVE-2018-0638 | Hig | 0.47 | 7.2 | 0.01 | Jan 9, 2019 | Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter. | ||
| CVE-2018-0637 | Hig | 0.47 | 7.2 | 0.01 | Jan 9, 2019 | Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter. | ||
| CVE-2018-0636 | Hig | 0.47 | 7.2 | 0.01 | Jan 9, 2019 | Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certain URL, different URL from CVE-2018-0634. | ||
| CVE-2018-0635 | Hig | 0.47 | 7.2 | 0.01 | Jan 9, 2019 | Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter. | ||
| CVE-2018-0634 | Hig | 0.47 | 7.2 | 0.01 | Jan 9, 2019 | Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmode parameter of a certain URL. |
- risk 0.47cvss 7.2epss 0.02
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date parameter, time parameter, and offset parameter.
- risk 0.47cvss 7.2epss 0.02
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.
- risk 0.47cvss 7.2epss 0.01
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.
- risk 0.47cvss 7.2epss 0.01
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter.
- risk 0.47cvss 7.2epss 0.01
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter.
- risk 0.47cvss 7.2epss 0.01
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certain URL, different URL from CVE-2018-0634.
- risk 0.47cvss 7.2epss 0.01
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter.
- risk 0.47cvss 7.2epss 0.01
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmode parameter of a certain URL.