CVE-2018-16193: XSS
Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-16193?
CVE-2018-16193 is a cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR firmware versions 1.1.1 and earlier.
How does CVE-2018-16193 affect NEC Aterm WF1200CR and Aterm WG1200CR?
CVE-2018-16193 allows authenticated attackers to inject arbitrary web script or HTML.
How severe is CVE-2018-16193?
CVE-2018-16193 has a severity score of 5.4, which is considered medium.
How can I fix CVE-2018-16193?
To fix CVE-2018-16193, update the Aterm WF1200CR firmware to version 1.1.2 or later, and update the Aterm WG1200CR firmware to version 1.0.2 or later.
Where can I find more information about CVE-2018-16193?
More information about CVE-2018-16193 can be found at the following references: [NEC Security Info](https://jpn.nec.com/security-info/secinfo/nv18-021.html) and [JVN](https://jvn.jp/en/jp/JVN87535892/index.html).