CVE-2018-16193
Severity Score
5.4
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerabilidad Cross-Site Scripting (XSS) en Aterm WF1200CR y Aterm WG1200CR (Aterm WF1200CR con firmware en versiones 1.1.1 y anteriores y Aterm WG1200CR con firmware en versiones 1.0.1 y anteriores) permite que los atacantes autenticados inyecten scripts web o HTML arbitrarios mediante vectores sin especificar.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-08-30 CVE Reserved
- 2019-01-09 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/en/jp/JVN87535892/index.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://jpn.nec.com/security-info/secinfo/nv18-021.html | 2019-01-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nec Search vendor "Nec" | Aterm Wf1200cr Firmware Search vendor "Nec" for product "Aterm Wf1200cr Firmware" | <= 1.1.1 Search vendor "Nec" for product "Aterm Wf1200cr Firmware" and version " <= 1.1.1" | - |
Affected
| in | Nec Search vendor "Nec" | Aterm Wf1200cr Search vendor "Nec" for product "Aterm Wf1200cr" | - | - |
Safe
|
| Nec Search vendor "Nec" | Aterm Wg1200cr Firmware Search vendor "Nec" for product "Aterm Wg1200cr Firmware" | <= 1.0.1 Search vendor "Nec" for product "Aterm Wg1200cr Firmware" and version " <= 1.0.1" | - |
Affected
| in | Nec Search vendor "Nec" | Aterm Wg1200cr Search vendor "Nec" for product "Aterm Wg1200cr" | - | - |
Safe
|