CVE-2018-0640 Vulnerability Details

  /     /     /  

CVE-2018-0640 Metadata Quick Info

CVE Published: 09/01/2019 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: jpcert | Vendor: NEC Corporation | Product: HC100RC
Status : PUBLISHED

---

CVE-2018-0640 Description

Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Buffer Overflow
Source: NEC Corporation

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).