CVE-2020-5534: OS Command Injection
Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-5534?
CVE-2020-5534 is a vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier that allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges.
How severe is CVE-2020-5534?
CVE-2020-5534 is classified as a high severity vulnerability with a severity value of 8.
How can an attacker exploit CVE-2020-5534?
An attacker can exploit CVE-2020-5534 by being authenticated on the same network segment and executing arbitrary OS commands with root privileges.
Is NEC Aterm WG2600HS firmware version 1.3.2 affected by CVE-2020-5534?
Yes, NEC Aterm WG2600HS firmware version 1.3.2 is affected by CVE-2020-5534.
How can I fix CVE-2020-5534?
To fix CVE-2020-5534, update your Aterm WG2600HS firmware to a version later than 1.3.2 as specified in the vendor's security advisory.