Description
Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NEC | Aterm W300P | Ver1.0.13 and earlier | — |
References
- https://jpn.nec.com/security-info/secinfo/nv18-011.html
- JVN#26629618 third-party-advisory