Skip to content
OpenAdvisories
Unscored CVE-2018-16195 EUVD-2018-8048GHSA-jh4x-vxv6-xj4j

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows an at…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: NEC Product: Aterm WF1200CR and Aterm WG1200CR

Description

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands via SOAP interface of UPnP.

Affected products

VendorProductAffectedFixed
NEC Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) —

References