Aterm WG1200HP firmware Ver1.0.31 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter.
nec aterm_wg1200hp_firmware