Skip to content
OpenAdvisories
Unscored CVE-2018-0639 EUVD-2018-1449GHSA-72f4-4xcc-jqh3

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date p…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: NEC Product: HC100RC

Description

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.

Affected products

VendorProductAffectedFixed
NEC HC100RC Ver1.0.1 and earlier —

References