NEC Corporation vulnerabilities, page 5
89 vulnerabilities
Known vulnerabilities in NEC Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 114 products.
HighCVE-2023-39546nec corporation · clusterpro x (expresscluster x) +3 morenec corporation clusterpro x (expresscluster x)CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.EPSS0.63%HighCVE-2023-39547nec corporation · clusterpro x (expresscluster x) +3 morenec corporation clusterpro x (expresscluster x)CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.EPSS0.63%HighCVE-2023-39544nec corporation · clusterpro x singleserversafe (expresscluster x singleserversafe) +3 morenec corporation clusterpro x singleserversafe (expresscluster x singleserversafe)CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.EPSS0.63%HighCVE-2023-39548nec corporation · clusterpro x (expresscluster x) +3 morenec corporation clusterpro x (expresscluster x)CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.EPSS0.74%HighCVE-2023-25011nec corporation · pc settings tool +1 morenec corporation pc settings toolPC settings tool Ver10.1.26.0 and earlier, PC settings tool Ver11.0.22.0 and earlier allows a attacker to write to the registry as administrator privileges with standard user privileges.EPSS0.17%HighCVE-2023-3333nec corporation · aterm wf300hp +33 morenec corporation aterm wf300hpImproper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.EPSS0.71%MediumCVE-2023-3330nec corporation · aterm wf300hp +33 morenec corporation aterm wf300hpImproper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.EPSS0.51%MediumCVE-2023-3331nec corporation · aterm wf300hp +33 morenec corporation aterm wf300hpImproper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete
specific files in the product.EPSS0.55%MediumCVE-2023-3332nec corporation · aterm wf300hp +33 morenec corporation aterm wf300hpImproper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to
execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.EPSS0.35%