CVE-2018-0640

Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.

Score

CVSS 3.0 7.2 High

Status

Modified - vultures@jpcert.or.jp

Published

2019-01-09

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Aterm Hc100rc Firmware (Nec)
• Hc100rc (Nec Corporation)

References

• https://jpn.nec.com/security-info/secinfo/nv18-011.html
• https://jvn.jp/en/jp/JVN84825660/index.html