CVE-2018-0639
High
Description
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.
SeverityHigh
CVSS7.2
Exploit probability—
ProductNec Aterm Hc100rc Firmware
PublishedJan 9, 2019
First seenJan 9, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nec aterm_hc100rc_firmware | v ≤ 1.0.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.