CVE-2018-16195: OS Command Injection
Published Jan 9, 2019
·Updated
Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands via SOAP interface of UPnP.
Affected Software
4 affected components
NEC Aterm WF1200CR firmware<=1.1.1
NEC Aterm WF1200CR
NEC Aterm WG1200CR firmware<=1.0.1
NEC Aterm WG1200CR
Event History
Jan 9, 2019
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2018-16195.
2
What is the severity of CVE-2018-16195?
CVE-2018-16195 has a severity rating of 8.8 (high).
3
Which software versions are affected by CVE-2018-16195?
CVE-2018-16195 affects Aterm WF1200CR firmware versions up to and including Ver1.1.1 and Aterm WG1200CR firmware versions up to and including Ver1.0.1.
4
How can an attacker exploit CVE-2018-16195?
An attacker on the same network segment can execute arbitrary OS commands via the SOAP interface of UPnP.
5
Is there a fix available for CVE-2018-16195?
There is no specific fix available mentioned in the provided information. It is recommended to check with the vendor for any available patches or updates.