Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nec vulnerabilities and exploits
(subscribe to this query)
9
CVSSv2
CVE-2018-0636
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certain URL, different URL from CVE-2018-0634.
Nec Aterm Hc100rc Firmware
9
CVSSv2
CVE-2018-0637
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter.
Nec Aterm Hc100rc Firmware
6.5
CVSSv2
CVE-2018-0640
Buffer overflow in Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.
Nec Aterm Hc100rc Firmware
5
CVSSv2
CVE-2019-20026
The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote malicious users to reset all existing usernames and passwords to default values via a crafted request.
Nec Sv9100 Firmware
4.6
CVSSv2
CVE-2019-20030
An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected.
Nec Um8000 Firmware
7.5
CVSSv2
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface.
Nec Sv8100 Firmware
9
CVSSv2
CVE-2020-5633
Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and previous versions is applied allows remote malicio...
Nec Baseboard Management Controller
7.7
CVSSv2
CVE-2020-5534
Aterm WG2600HS firmware Ver1.3.2 and previous versions allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.
Nec Aterm Wg2600hs Firmware
9
CVSSv2
CVE-2018-0629
Aterm W300P Ver1.0.13 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response.
Nec Aterm W300p Firmware
5.8
CVSSv2
CVE-2020-5684
iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle malicious user to eavesdrop on an encrypted communication or alter the communication via a cr...
Nec Ism Server
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120
CVE-2024-35921
CVE-2024-35874
brute force
CVE-2024-36080
unprivileged
CVE-2024-35917
IDOR
CVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »