Skip to content
Noroxi

NEC records

123 published records for vendor nec.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
26
With a fix record
1.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

123 records
  • CVE-1999-0043
    52Plan

    Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.

    CriticalCVSS 9.8No exploitEPSS 45%

    isc · innDec 4, 1996

  • CVE-2020-17408
    51Plan

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1.

    HighCVSS 7.5No exploitEPSS 69%

    nec · expresscluster xSep 10, 2020

  • CVE-1999-0009
    49Plan

    Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

    CriticalCVSS 10.0Proof of conceptEPSS 29%

    data general · dg uxApr 8, 1998

  • CVE-2018-11741
    44Plan

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    nec · univerge sv9100 webpro firmwareDec 26, 2018

  • CVE-1999-0208
    44Plan

    rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    sgi · irixDec 12, 1995

  • CVE-2018-11742
    43Plan

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    nec · univerge sv9100 webpro firmwareDec 26, 2018

  • CVE-2002-2368
    42Plan

    Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitra

    CriticalCVSS 10.0No exploitEPSS 7%

    nec · socks 5Dec 31, 2002

  • CVE-2020-10917
    41Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NEC ESMPRO Manager 6.42.

    CriticalCVSS 9.8No exploitEPSS 6%

    nec · esmpro managerJul 22, 2020

  • CVE-1999-0048
    41Plan

    Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.

    CriticalCVSS 10.0No exploitEPSS 3%

    debian · netkitJan 27, 1997

  • CVE-2020-5633
    40Plan

    Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti,

    CriticalCVSS 9.8No exploitEPSS 3%

    nec · baseboard management controllerJan 13, 2021

  • CVE-2019-20025
    40Plan

    Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with

    CriticalCVSS 9.8No exploitEPSS 3%

    nec · sv9100 firmwareJul 29, 2020

  • CVE-2021-20702
    40Plan

    Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earli

    CriticalCVSS 9.8No exploitEPSS 2%

    nec · clusterpro xNov 2, 2021

  • CVE-2021-20704
    40Plan

    Buffer overflow vulnerability in the compatible API with previous versions CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 fo

    CriticalCVSS 9.8No exploitEPSS 2%

    nec · clusterpro xNov 2, 2021

  • CVE-2021-20703
    40Plan

    Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earli

    CriticalCVSS 9.8No exploitEPSS 2%

    nec · clusterpro xNov 2, 2021

  • CVE-2021-20701
    40Plan

    Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUS

    CriticalCVSS 9.8No exploitEPSS 2%

    nec · clusterpro xNov 2, 2021

  • CVE-2021-20700
    40Plan

    Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUS

    CriticalCVSS 9.8No exploitEPSS 2%

    nec · clusterpro xNov 2, 2021

  • CVE-2020-5685
    40Plan

    UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of

    CriticalCVSS 9.8No exploitEPSS 2%

    nec · univerge sv9500 firmwareJan 13, 2021

  • CVE-2022-34822
    39Monitor

    Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 Sin

    CriticalCVSS 9.8No exploitEPSS 2%

    nec · expresscluster xNov 8, 2022

  • CVE-2023-3741
    39Monitor

    An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the

    CriticalCVSS 9.8No exploitEPSS 1%

    nec · itk-6dgs-1\(bk\)tel firmwareNov 29, 2023

  • CVE-2022-25621
    39Monitor

    UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.1

    CriticalCVSS 9.8No exploitEPSS 1%

    nec · univerge wa1020 firmwareMar 11, 2022

  • CVE-2019-20027
    39Monitor

    Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if in

    CriticalCVSS 9.8No exploitEPSS 1%

    nec · sv8100 firmwareJul 29, 2020

  • CVE-2021-20711
    39Monitor

    Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

    CriticalCVSS 9.8No exploitEPSS 1%

    nec · aterm wg2600hs firmwareApr 25, 2021

  • CVE-2022-34823
    39Monitor

    Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 Si

    CriticalCVSS 9.8No exploitEPSS 1%

    nec · expresscluster xNov 8, 2022

  • CVE-2022-34825
    39Monitor

    Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0

    CriticalCVSS 9.8No exploitEPSS 1%

    nec · expresscluster xNov 8, 2022

  • CVE-2022-34824
    39Monitor

    Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CL

    CriticalCVSS 9.8No exploitEPSS 1%

    nec · expresscluster xNov 8, 2022