Nec Aterm W300P Firmware vulnerabilities

5 known vulnerabilities affecting nec/aterm_w300p_firmware.

Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH5

Vulnerabilities

Page 1 of 1
CVE-2018-0633HIGHCVSS 7.2≤ 1.0.132019-01-09
CVE-2018-0633 [HIGH] CWE-119 CVE-2018-0633: Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to ex Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter.
nvd
CVE-2018-0631HIGHCVSS 7.2≤ 1.0.132019-01-09
CVE-2018-0631 [HIGH] CWE-78 CVE-2018-0631: Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter.
nvd
CVE-2018-0632HIGHCVSS 7.2≤ 1.0.132019-01-09
CVE-2018-0632 [HIGH] CWE-119 CVE-2018-0632: Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to ex Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response.
nvd
CVE-2018-0630HIGHCVSS 7.2≤ 1.0.132019-01-09
CVE-2018-0630 [HIGH] CWE-78 CVE-2018-0630: Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter.
nvd
CVE-2018-0629HIGHCVSS 7.2≤ 1.0.132019-01-09
CVE-2018-0629 [HIGH] CWE-78 CVE-2018-0629: Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response.
nvd