CVE-2018-16192 Information disclosure in Aterm WF1200CR and Aterm WG1200CR
An attacker on the same network can obtain registered device information from NEC Aterm WF1200CR and WG1200CR routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-16192?
CVE-2018-16192 is a medium-severity vulnerability in NEC Corporation Aterm WF1200CR and Aterm WG1200CR, published on 9 Jan 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allow an attacker on the same network segment to obtain information registered on the device via unspecified vectors.
Weakness: CWE-200
Which versions are affected by CVE-2018-16192?
It affects 2 products.
Products include Nec Aterm Wf1200cr Firmware, Nec Aterm Wg1200cr Firmware.
How do I fix CVE-2018-16192?
No fix has been published for CVE-2018-16192 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-16192 being exploited?
There is no known exploitation of CVE-2018-16192 in the wild and no public exploit code.
Other vulnerabilities in NEC Corporation Aterm WF1200CR and Aterm WG1200CR
- CVE-2018-16195 Command injection in Aterm WF1200CR and Aterm WG1200CR
- CVE-2021-20708 Command injection in NEC Aterm devices
- CVE-2021-20709 Command injection in NEC Aterm devices
- CVE-2018-16194 Command injection in Aterm WF1200CR and Aterm WG1200CR
- CVE-2018-16193 Cross-site scripting in Aterm WF1200CR and Aterm WG1200CR
Sources
Also known as GHSA-rv22-5gfw-ccxw.