aterm records

11 published records for vendor aterm.

Researcher profile

Entered KEV: 1 · 9.1%
Weaponized: 1 · 9.1%
Pre-auth RCE: 3
With a fix record: 9.1%
Median publish → KEV: 3062 days

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
99Now	CVE-2014-8361Weaponized	The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploirealtek · realtek sdk pre-auth RCE	Critical9.8	KEV	99.9%	May 1, 2015
35Monitor	CVE-2021-20621No exploit	Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and eaterm · wg2600hp firmware · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Jan 28, 2021
35Monitor	CVE-2016-1168No exploit	Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijaterm · wf800hp · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Apr 1, 2016
35Monitor	CVE-2016-1167No exploit	Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitraaterm · wg300hp · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Apr 1, 2016
31Monitor	CVE-2017-12575No exploit	An issue was discovered on the NEC Aterm WG2600HP2 1.0.2.aterm · wg2600hp2 firmware · CWE-306 Pre-auth Auth bypass	High7.5	—	2.3%	Aug 24, 2018
31Monitor	CVE-2003-0024No exploit	The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequaterm · aterm pre-auth RCE	High7.5	—	1.8%	Mar 3, 2003
31Monitor	CVE-2003-0067No exploit	The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it backaterm · aterm pre-auth RCE	High7.5	—	1.7%	Mar 18, 2003
24Monitor	CVE-2021-20620No exploit	Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via aterm · wg2600hp firmware · CWE-79 Pre-auth XSS	Medium6.1	—	1.0%	Jan 28, 2021
24Monitor	CVE-2021-20622No exploit	Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allowsaterm · wg2600hp firmware · CWE-79 Pre-auth XSS	Medium6.1	—	1.0%	Jan 28, 2021
24Monitor	CVE-2021-20710No exploit	Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script viaaterm · wg2600hs firmware · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Apr 25, 2021
14Monitor	CVE-2008-1142No exploit	rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connectrxvt · rxvt · CWE-264	Low3.7	—	0.3%	Apr 7, 2008

CVE-2014-8361
99Now
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploi
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
realtek · realtek sdkMay 1, 2015
CVE-2021-20621
35Monitor
Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and e
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
aterm · wg2600hp firmwareJan 28, 2021
CVE-2016-1168
35Monitor
Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hij
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
aterm · wf800hpApr 1, 2016
CVE-2016-1167
35Monitor
Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitra
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
aterm · wg300hpApr 1, 2016
CVE-2017-12575
31Monitor
An issue was discovered on the NEC Aterm WG2600HP2 1.0.2.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Auth bypass
aterm · wg2600hp2 firmwareAug 24, 2018
CVE-2003-0024
31Monitor
The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequ
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
aterm · atermMar 3, 2003
CVE-2003-0067
31Monitor
The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
aterm · atermMar 18, 2003
CVE-2021-20620
24Monitor
Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
aterm · wg2600hp firmwareJan 28, 2021
CVE-2021-20622
24Monitor
Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
aterm · wg2600hp firmwareJan 28, 2021
CVE-2021-20710
24Monitor
Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
aterm · wg2600hs firmwareApr 25, 2021
CVE-2008-1142
14Monitor
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connect
LowCVSS 3.7No exploitEPSS 0%
rxvt · rxvtApr 7, 2008