VulnerabilityModified
CVE-2018-16192
Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allow an attacker on the same network segment to obtain information registered on the device via unspecified vectors.
MEDIUM 6.5EPSS 0.50%
Does this matter?
Lower severity and a low EPSS score (0.50%). Track it; it rarely justifies an emergency change on its own.
Description
Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allow an attacker on the same network segment to obtain information registered on the device via unspecified vectors.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.50% probability · 41th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- nec/aterm wf1200cr firmware · nec/aterm wg1200cr firmware
- Source
- vultures@jpcert.or.jp
References
- https://jpn.nec.com/security-info/secinfo/nv18-021.htmlVendor Advisory
- https://jvn.jp/en/jp/JVN87535892/index.htmlThird Party Advisory
- https://jpn.nec.com/security-info/secinfo/nv18-021.htmlVendor Advisory
- https://jvn.jp/en/jp/JVN87535892/index.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.