Nec vulnerabilities
109 vulnerabilities
Known vulnerabilities in Nec products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 207 products.
Products
50 of 207- Expresscluster X19 vulnerabilities
- Aterm W300P17 vulnerabilities
- Expresscluster X Singleserversafe17 vulnerabilities
- Aterm Wf300Hp16 vulnerabilities
- Aterm Wg1200Hp16 vulnerabilities
- Aterm Wg1400Hp16 vulnerabilities
- Aterm Wg1800Hp16 vulnerabilities
- Aterm Wg1800Hp216 vulnerabilities
- Aterm Wg2200Hp16 vulnerabilities
- Aterm Wg300Hp16 vulnerabilities
- Aterm Wg600Hp16 vulnerabilities
- Aterm Wr8170N16 vulnerabilities
- Aterm Wr8175N16 vulnerabilities
- Aterm Wr8370N16 vulnerabilities
- Aterm Wr8600N16 vulnerabilities
- Aterm Wr8700N16 vulnerabilities
- Aterm Wr8750N16 vulnerabilities
- Aterm Wr9300N16 vulnerabilities
- Aterm Wr9500N16 vulnerabilities
- Aterm W1200Ex Ms13 vulnerabilities
- Aterm Wg1200Hp213 vulnerabilities
- Aterm Wg1200Hp313 vulnerabilities
- Aterm Wg1200Hs213 vulnerabilities
- Aterm Wg1200Hs313 vulnerabilities
- Aterm Wg1800Hp313 vulnerabilities
- Aterm Wg1800Hp413 vulnerabilities
- Aterm Wg1900Hp13 vulnerabilities
- Aterm Wg1900Hp213 vulnerabilities
- Aterm Cr2500P12 vulnerabilities
- Aterm Mr01Ln12 vulnerabilities
- Aterm Mr02Ln12 vulnerabilities
- Aterm Wf1200Hp12 vulnerabilities
- Aterm Wf1200Hp212 vulnerabilities
- Aterm Wf300Hp212 vulnerabilities
- Aterm Wf800Hp12 vulnerabilities
- Aterm Wg1200Hs12 vulnerabilities
- Aterm Wg1810Hp\(Je\)12 vulnerabilities
- Aterm Wg1810Hp\(Mf\)12 vulnerabilities
- Aterm Wm3400Rn12 vulnerabilities
- Aterm Wm3450Rn12 vulnerabilities
- Aterm Wm3500R12 vulnerabilities
- Aterm Wm3600R12 vulnerabilities
- Aterm Wm3800R12 vulnerabilities
- Aterm Wr1200H12 vulnerabilities
- Aterm Wr4100N12 vulnerabilities
- Aterm Wr4500N12 vulnerabilities
- Aterm Wr6600H12 vulnerabilities
- Aterm Wr6650S12 vulnerabilities
- Aterm Wr6670S12 vulnerabilities
- Aterm Wr7800H12 vulnerabilities
CVE-2018-16194nec corporationaterm wf1200cr and aterm wg1200cr+2
EPSS score1.40%
Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to execute arbitrary OS commands via unspecified vectors.CVE-2018-16195nec corporationaterm wf1200cr and aterm wg1200cr+2EPSS score0.73%
Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands via SOAP interface of UPnP.CVE-2018-16193nec corporationaterm wf1200cr and aterm wg1200cr+2EPSS score0.53%
Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2018-16192nec corporationaterm wf1200cr and aterm wg1200cr+2EPSS score0.50%
Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allow an attacker on the same network segment to obtain information registered on the device via unspecified vectors.CVE-2018-11741necuniverge_sv9100_webpro_firmwareEPSS score17.89%
NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs.CVE-2018-11742necuniverge_sv9100_webpro_firmwareEPSS score14.34%
NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.CVE-2018-0632nec corporationaterm w300p+1EPSS score1.80%
Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response.CVE-2018-0640nec corporationhc100rc+1EPSS score1.80%
Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.CVE-2018-0629nec corporationaterm w300p+1EPSS score1.40%
Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response.CVE-2018-0634nec corporationhc100rc+1EPSS score1.40%
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmode parameter of a certain URL.CVE-2018-0626nec corporationwg1200hp+1EPSS score1.40%
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter.CVE-2018-0639nec corporationhc100rc+1EPSS score1.40%
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.CVE-2018-0636nec corporationhc100rc+1EPSS score1.40%
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certain URL, different URL from CVE-2018-0634.CVE-2018-0638nec corporationhc100rc+1EPSS score1.40%
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter.CVE-2018-0637nec corporationhc100rc+1EPSS score1.40%
Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter.CVE-2018-0625nec corporationwg1200hp+1EPSS score1.40%
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter.CVE-2018-0633nec corporationaterm w300p+1EPSS score1.80%
Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter.CVE-2018-0630nec corporationaterm w300p+1EPSS score1.40%
Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter.CVE-2018-0628nec corporationwg1200hp+1EPSS score1.40%
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response.CVE-2018-0631nec corporationaterm w300p+1EPSS score1.40%
Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter.