CVE-2018-0626

Name of the Vulnerable Software and Affected Versions Aterm WG1200HP firmware version 1.0.31 and earlier

Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. This can be achieved via the sysCmd in the formWsc parameter.

Recommendations For Aterm WG1200HP firmware version 1.0.31 and earlier, consider restricting access to the administrator account and limiting the use of the formWsc parameter until a fix is available. As a temporary workaround, avoid using the sysCmd in the formWsc parameter to minimize the risk of exploitation.