Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nec vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv3
CVE-2018-0630
Aterm W300P Ver1.0.13 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter.
Nec Aterm W300p Firmware
7.2
CVSSv3
CVE-2018-0632
Buffer overflow in Aterm W300P Ver1.0.13 and previous versions allows attacker with administrator rights to execute arbitrary code via HTTP request and response.
Nec Aterm W300p Firmware
7.2
CVSSv3
CVE-2018-0635
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via filename parameter.
Nec Aterm Hc100rc Firmware
7.2
CVSSv3
CVE-2018-0639
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.
Nec Aterm Hc100rc Firmware
7.2
CVSSv3
CVE-2018-0641
Buffer overflow in Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date parameter, time parameter, and offset parameter.
Nec Aterm Hc100rc Firmware
8
CVSSv3
CVE-2020-5534
Aterm WG2600HS firmware Ver1.3.2 and previous versions allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.
Nec Aterm Wg2600hs Firmware
9.8
CVSSv3
CVE-2019-20025
Certain builds of NEC SV9100 software could allow an unauthenticated, remote malicious user to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account wit...
Nec Sv9100 Firmware
7.5
CVSSv3
CVE-2019-20026
The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote malicious users to reset all existing usernames and passwords to default values via a crafted request.
Nec Sv9100 Firmware
9.8
CVSSv3
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface.
Nec Sv8100 Firmware
7.2
CVSSv3
CVE-2018-0625
Aterm WG1200HP firmware Ver1.0.31 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter.
Nec Aterm Wg1200hp Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »