CVE-2018-16192
Severity Score
6.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allow an attacker on the same network segment to obtain information registered on the device via unspecified vectors.
Aterm WF1200CR y Aterm WG1200CR (Aterm WF1200CR con firmware en versiones 1.1.1 y anteriores y Aterm WG1200CR con firmware en versiones 1.0.1 y anteriores) permiten que un atacante en el mismo segmento de red obtenga información registrada en el dispositivo mediante vectores sin especificar.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-08-30 CVE Reserved
- 2019-01-09 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/en/jp/JVN87535892/index.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://jpn.nec.com/security-info/secinfo/nv18-021.html | 2019-01-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nec Search vendor "Nec" | Aterm Wf1200cr Firmware Search vendor "Nec" for product "Aterm Wf1200cr Firmware" | <= 1.1.1 Search vendor "Nec" for product "Aterm Wf1200cr Firmware" and version " <= 1.1.1" | - |
Affected
| in | Nec Search vendor "Nec" | Aterm Wf1200cr Search vendor "Nec" for product "Aterm Wf1200cr" | - | - |
Safe
|
| Nec Search vendor "Nec" | Aterm Wg1200cr Firmware Search vendor "Nec" for product "Aterm Wg1200cr Firmware" | <= 1.0.1 Search vendor "Nec" for product "Aterm Wg1200cr Firmware" and version " <= 1.0.1" | - |
Affected
| in | Nec Search vendor "Nec" | Aterm Wg1200cr Search vendor "Nec" for product "Aterm Wg1200cr" | - | - |
Safe
|