NEC Platforms, Ltd vulnerabilities
14 vulnerabilities
Known vulnerabilities in NEC Platforms, Ltd products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 61 products.
Products
50 of 61- Aterm Wx3600Hp4 vulnerabilities
- Aterm Gb1200Pe3 vulnerabilities
- Aterm Wf1200Cr3 vulnerabilities
- Aterm Wg1200Cr3 vulnerabilities
- Aterm Wg2600Hm43 vulnerabilities
- Aterm Wg2600Hp43 vulnerabilities
- Aterm Wg2600Hs3 vulnerabilities
- Aterm Wg2600Hs23 vulnerabilities
- Aterm Wx1500Hp3 vulnerabilities
- Aterm Wx3000Hp3 vulnerabilities
- Aterm Wx3000Hp23 vulnerabilities
- Aterm Gx1200Hp2 vulnerabilities
- Aterm Gx1200Hs42 vulnerabilities
- Aterm W1200Ex( MS)2 vulnerabilities
- Aterm Wg1200Dm42 vulnerabilities
- Aterm Wg1200Hp22 vulnerabilities
- Aterm Wg1200Hp32 vulnerabilities
- Aterm Wg1200Hp42 vulnerabilities
- Aterm Wg1200Hs22 vulnerabilities
- Aterm Wg1200Hs32 vulnerabilities
- Aterm Wg1200Hs42 vulnerabilities
- Aterm Wg1800Hp32 vulnerabilities
- Aterm Wg1800Hp42 vulnerabilities
- Aterm Wg1900Hp2 vulnerabilities
- Aterm Wg1900Hp22 vulnerabilities
- Calsos CSDX And CSDJ Series Products2 vulnerabilities
- ITK 12D 1(Bk)Tel2 vulnerabilities
- ITK 12D 1P(Bk)Tel2 vulnerabilities
- ITK 12DG 1P(Bk)Tel2 vulnerabilities
- ITK 32Lcg 1P(Bk)Tel2 vulnerabilities
- ITK 32Lcgs 1A(Bk) TEL2 vulnerabilities
- ITK 32Lcgs 1(Bk) TEL2 vulnerabilities
- ITK 32Lcgs 1P(Bk) TEL2 vulnerabilities
- ITK 32Tcg 1P(Bk)Tel2 vulnerabilities
- ITK 32Tcgs 1A(Bk) TEL2 vulnerabilities
- ITK 32Tcgs 1(Bk) TEL2 vulnerabilities
- ITK 32Tcgs 1P(Bk) TEL2 vulnerabilities
- ITK 6D 1(Bk)Tel2 vulnerabilities
- ITK 6D 1P(Bk)Tel2 vulnerabilities
- ITK 6DG 1P(Bk)Tel2 vulnerabilities
- ITK 6DGS 1A(Bk) TEL2 vulnerabilities
- ITK 6DGS 1(Bk) TEL2 vulnerabilities
- ITK 6DGS 1P(Bk) TEL2 vulnerabilities
- ITK 8LCG 1P(Bk)Tel2 vulnerabilities
- ITK 8LCX 1(Bk)Tel2 vulnerabilities
- ITK 8LCX 1P(Bk)Tel2 vulnerabilities
- ITK 8Tcgx 1(Bk)Tel2 vulnerabilities
- ITK 8Tcgx 1P(Bk)Tel2 vulnerabilities
- Aterm 19000T12Be1 vulnerabilities
- Aterm Cm51Fd1 vulnerabilities
CVE-2018-0613nec platforms, ltd.calsos csdx and csdj series products+8
EPSS score1.08%
NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote authenticated attackers to bypass access restriction to conduct arbitrary operations with administrative privilege via unspecified vectors.CVE-2018-0614nec platforms, ltd.calsos csdx and csdj series products+8EPSS score0.79%
Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2021-20653nec platforms, ltd.calsos csdj+4EPSS score1.23%
Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows remote attackers to bypass access restriction and to obtain unauthorized historical data without access privileges via unspecified vectors.CVE-2021-20677nec platforms, ltd.univerge aspire series pbx+4EPSS score0.95%
UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command.CVE-2022-25621nec platforms, ltd.univerge dt+10EPSS score1.44%
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.CVE-2024-3016nec platforms, ltditk-12d-1(bk)tel+21EPSS score0.68%
NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.CVE-2026-4619nec platforms, ltd.aterm wx3600hp+1EPSS score0.50%
Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.CVE-2026-4621nec platforms, ltd.aterm gb1200pe+34EPSS score0.25%
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.CVE-2026-4620nec platforms, ltd.aterm wx1500hp+3EPSS score1.22%
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.CVE-2026-4622nec platforms, ltd.aterm gb1200pe+17EPSS score1.22%
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.CVE-2026-4309nec platforms, ltd.aterm gb1200pe+32EPSS score0.23%
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.CVE-2026-6059nec platforms, ltd.aterm 19000t12be+8EPSS score0.28%
A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.CVE-2026-8652nec platforms, ltd.aterm cm51fd+1EPSS score1.44%
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.CVE-2023-3741nec platforms, ltditk-12d-1(bk)tel+43EPSS score1.48%
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.