CVE-2018-0638

7.2 highEPSS 1.4%

High (7.2) in nec aterm hc100rc firmware. EPSS 1.4% chance of exploitation in the next 30 days.

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter.

Severity

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2019-01-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19