nec Vulnerability Advisory Catalog

Total 105 security vulnerabilities recorded for nec software and firmware.

← Back to All Vendors
Component: aterm_wf1200cr_firmware

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allow an attacker on th...

📅 2019-01-09
CVSS 6.5 Dossier →
Component: aterm_hc100rc_firmware

Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date pa...

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_hc100rc_firmware

Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date param...

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_hc100rc_firmware

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, t...

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_hc100rc_firmware

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter....

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_hc100rc_firmware

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter....

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_hc100rc_firmware

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certa...

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_hc100rc_firmware

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter....

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_hc100rc_firmware

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmod...

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_w300p_firmware

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter....

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_w300p_firmware

Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response...

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_w300p_firmware

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter....

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_w300p_firmware

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter....

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_w300p_firmware

Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response....

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_wg1200hp_firmware

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response...

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_wg1200hp_firmware

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter....

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_wg1200hp_firmware

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc paramet...

📅 2019-01-09
CVSS 7.2 Dossier →
Component: aterm_wg1200hp_firmware

Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter....

📅 2019-01-09
CVSS 7.2 Dossier →
CVE-2018-11742 CRITICAL
Component: univerge_sv9100_webpro_firmware

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI....

📅 2018-12-26
CVSS 9.8 Dossier →
CVE-2018-11741 CRITICAL
Component: univerge_sv9100_webpro_firmware

NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOT...

📅 2018-12-26
CVSS 9.8 Dossier →
Component: expresscluster_x

Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.3.1-1 on Linux and Solaris allo...

📅 2016-01-30
CVSS 7.5 Dossier →
CVE-2013-7314 UNKNOWN
Component: ip38x_1000

The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link S...

📅 2014-01-23
CVSS 6.8 Dossier →
CVE-2013-0717 UNKNOWN
Component: atermwm3450rn

Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, At...

📅 2013-03-19
CVSS 6.8 Dossier →
CVE-2013-0706 UNKNOWN
Component: universal_raid_utility

NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which al...

📅 2013-02-22
CVSS 9.0 Dossier →
Page 4 of 5 (105 Total Records)