Nec vulnerabilities
Published CVEs affecting Nec products: 9 record(s), with severity, exploitation and fixes.
Aterm Wx3600hp Firmware 4Aterm Wx1500hp Firmware 3Aterm Wg2600hs Firmware 3Aterm Wf1200cr Firmware 3Aterm Wg1200cr Firmware 3Aterm Wg2600hp4 Firmware 3Aterm Wg2600hm4 Firmware 3Aterm Wg2600hs2 Firmware 3Aterm Wx3000hp Firmware 3Aterm W1200ex-ms Firmware 2Aterm Wg1200hs4 Firmware 2Aterm Wg1200hp4 Firmware 2Aterm Wg1800hp4 Firmware 2Aterm Wg1200hs3 Firmware 2Aterm Wg1900hp2 Firmware 2Aterm Wg1200hp3 Firmware 2Aterm Wg1800hp3 Firmware 2Aterm Wg1200hs2 Firmware 2Aterm Wg1900hp Firmware 2Aterm Wg1200hp2 Firmware 2Aterm Wx3000hp2 Firmware 2CLUSTERPRO X SingleServerSafe for Linux (EXPRESSCLUSTER X SingleServerSafe for Linux) 1ExpressUpdate Agent for Windows 1RakurakuMusen Start EX 1Asl Ux 4800 1CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux) 1Aterm Gb1200pe Firmware 1Up-ux V 1Ews-ux V 1
CVE-2026-8797
High · 8.5
CWE-782 Jun 26, 2026
An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If…
An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.
CVE-2026-4622
Critical · 9.8
CWE-78 Mar 27, 2026
OS Command Injection in Nec Aterm Wg2600hs Firmware
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
CVE-2026-4621
Medium · 5.6
CWE-912 Mar 27, 2026
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker…
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
CVE-2026-4620
Critical · 9.8
CWE-78 Mar 27, 2026
OS Command Injection in Nec Aterm Wx3600hp Firmware
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
CVE-2026-4619
Critical · 9.8
CWE-22 Mar 27, 2026
Path Traversal in Nec Aterm Wx3600hp Firmware
Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.
CVE-2026-4309
Medium · 6.5
CWE-862 Mar 27, 2026
Missing Authorization in Nec Aterm Wg2600hs Firmware
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
CVE-2025-12852
High · 8.4
CWE-427 Nov 18, 2025
Uncontrolled Search Path Element in Nec RakurakuMusen Start EX
DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker to manipulate the PC environment to cause unintended operations on the user's device.
CVE-2025-11546
Critical · 9.3
CWE-78 Nov 6, 2025
OS Command Injection in Nec CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux)
CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends specially crafted network packets to the product, arbitrary OS commands may be executed without authentication.
CVE-1999-0024
Medium · 5.0
Aug 13, 1997
DNS cache poisoning via BIND, by predictable query IDs.
DNS cache poisoning via BIND, by predictable query IDs.