← Back

Aterm Hc100rc Firmware

aterm_hc100rc_firmware

Vendor: Nec • 8 CVEs

CVEs (8)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Nec
1Aterm Hc100rc Firmware
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date parameter, time parameter, and offset parameter.
1Nec
1Aterm Hc100rc Firmware
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.
1Nec
1Aterm Hc100rc Firmware
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.
1Nec
1Aterm Hc100rc Firmware
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter.
1Nec
1Aterm Hc100rc Firmware
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter.
1Nec
1Aterm Hc100rc Firmware
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certain URL, different URL from CVE-2018-0634.
1Nec
1Aterm Hc100rc Firmware
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter.
1Nec
1Aterm Hc100rc Firmware
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmode parameter of a certain URL.