CVE-2018-0631: OS Command Injection
Published Jan 9, 2019
·Updated
Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter.
Affected Software
2 affected components
NEC Aterm W300P firmware<=1.0.13
NEC Aterm W300P
Event History
Jan 9, 2019
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-0631?
CVE-2018-0631 is a vulnerability that allows an attacker with administrator rights to execute arbitrary OS commands on a Aterm W300P device.
2
How can an attacker exploit CVE-2018-0631?
An attacker can exploit CVE-2018-0631 by using the targetAPSsid parameter to execute arbitrary OS commands on a Aterm W300P device.
3
What is the severity level of CVE-2018-0631?
The severity level of CVE-2018-0631 is critical with a CVSS score of 7.2.
4
Which software versions are affected by CVE-2018-0631?
Aterm W300P Ver1.0.13 and earlier versions are affected by CVE-2018-0631.
5
How can I mitigate CVE-2018-0631?
To mitigate CVE-2018-0631, users should update their Aterm W300P devices to the latest firmware version.