Browse CVEs

CRITICAL 9.8 CVE-2024-28007 Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2,… Aterm Wg1800hp4 Firmware Mitigation only Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-28008 Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG120… Aterm Wg1800hp4 Firmware Mitigation only Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-28009 Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2,… Aterm Wg1800hp4 Firmware Mitigation only Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-28010 Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-M… Aterm Wg1800hp4 Firmware Mitigation only Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-28011 Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1… Aterm Wg1800hp4 Firmware Mitigation only Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-28012 Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2,… Aterm Wg1800hp4 Firmware Mitigation only Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-28014 Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200… Aterm Wg1800hp4 Firmware Mitigation only Fix from $2,3002024-03-28 CRITICAL 9.8 CVE-2024-28015 Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, … Aterm Wg1800hp4 Firmware Mitigation only Fix from $2,3002024-03-28 MEDIUM 6.0 CVE-2024-28016 Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, … Aterm Wg1800hp4 Firmware Mitigation only Fix from $1,6002024-03-28 MEDIUM 5.3 CVE-2024-28006 Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2,… Aterm Wg1800hp4 Firmware Mitigation only Fix from $1,6002024-03-28 MEDIUM 5.3 CVE-2024-28013 Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP… Aterm Wg1800hp4 Firmware Mitigation only Fix from $1,6002024-03-28 CRITICAL 9.8 CVE-2023-3741 An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device. Itk 6dgs 1\(bk\)tel Firmware Mitigation only Fix from $2,3002023-11-30 HIGH 8.8 CVE-2023-39546 CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSaf… Expresscluster X Mitigation only Fix from $1,9502023-11-17 HIGH 7.2 CVE-2023-3333 Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG… Aterm Wf300hp Firmware Mitigation only Fix from $1,9502023-06-28 MEDIUM 5.4 CVE-2023-3331 Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG… Aterm Wf300hp Firmware Mitigation only Fix from $1,6002023-06-28 HIGH 7.5 CVE-2020-27859 This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is … Esmpro Manager Mitigation only Fix from $1,9502021-01-20 CRITICAL 9.8 CVE-2020-5685 UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service … Univerge Sv9500 Firmware Mitigation only Fix from $2,3002021-01-13 HIGH 7.5 CVE-2020-5686 Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker … Univerge Sv9500 Firmware Mitigation only Fix from $1,9502021-01-13 CRITICAL 9.8 CVE-2019-20025 Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcod… Sv9100 Firmware Mitigation only Fix from $2,3002020-07-29 CRITICAL 9.8 CVE-2019-20027 Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly… Sv8100 Firmware Mitigation only Fix from $2,3002020-07-29 CRITICAL 9.8 CVE-2019-20033 On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM in… Sv8100 Firmware Mitigation only Fix from $2,3002020-07-29 CRITICAL 9.1 CVE-2019-20031 NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number of login attempts in the tel… Um8000 Firmware Mitigation only Fix from $2,3002020-07-29 HIGH 8.8 CVE-2019-20029 An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, S… Sv8100 Firmware Mitigation only Fix from $1,9502020-07-29 HIGH 7.8 CVE-2019-20030 An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain acce… Um8000 Firmware Mitigation only Fix from $1,9502020-07-29 HIGH 7.5 CVE-2019-20026 The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwo… Sv9100 Firmware Mitigation only Fix from $1,9502020-07-29 HIGH 7.5 CVE-2019-20028 Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-on… Sv8100 Firmware Mitigation only Fix from $1,9502020-07-29 MEDIUM 6.5 CVE-2019-20032 An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of… Sv8100 Firmware Mitigation only Fix from $1,6002020-07-29 CRITICAL 9.8 CVE-2020-10917EPSS 6% This vulnerability allows remote attackers to execute arbitrary code on affected installations of NEC ESMPRO Manager 6.42. Authentication is not requ… Esmpro Manager Mitigation only Fix from $2,3002020-07-22 CRITICAL 9.8 CVE-2018-11741EPSS 18% NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GO… Univerge Sv9100 Webpro Firmware No fix yet Fix from $2,3002018-12-26 CRITICAL 9.8 CVE-2018-11742EPSS 14% NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI. Univerge Sv9100 Webpro Firmware No fix yet Fix from $2,3002018-12-26