← Back

CVE-2020-5525

nvd nist
Published: Feb 21, 2020Modified: Jun 17, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: NVD

Description

Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen.

Affected (3)

Nec
3 products
Aterm Wg2600hs Firmware
Aterm Wf1200c Firmware
Aterm Wg1200cr Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aterm Wg2600hs Firmware
Up to 1.3.2
Running on/withPlatform Versions
Nec
Aterm Wg2600hs
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aterm Wf1200c Firmware
Up to 1.2.1
Running on/withPlatform Versions
Nec
Aterm Wf1200c
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aterm Wg1200cr Firmware
Up to 1.2.1
Running on/withPlatform Versions
Nec
Aterm Wg1200cr
All versions

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (4)

Source: vultures@jpcert.or.jp
Not ApplicableThird Party Advisory
Source: vultures@jpcert.or.jp
Not ApplicableThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not ApplicableThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not ApplicableThird Party Advisory

Timeline

No history available yet.