Read the docs

NEC Corporation

Records141All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical37CVSS 9.0–10.0
CVSS high66CVSS 7.0–8.9

Exploited now

NEC Corporation records in CISA KEV

No NEC Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Expresscluster X 19 records HIGH Aterm W300p Firmware 18 records MEDIUM Aterm Wg1200hp Firmware 17 records MEDIUM Expresscluster X Singleserversafe 17 records MEDIUM Aterm Wf300hp Firmware 16 records MEDIUM Aterm Wg1400hp Firmware 16 records MEDIUM Aterm Wg1800hp2 Firmware 16 records MEDIUM Aterm Wg1800hp Firmware 16 records MEDIUM

Records

9 records in Aterm Wf1200cr Firmware · all components

TI-2018-11592 CVE-2018-16195 · GHSA-jh4x-vxv6-xj4j

OS command injection in NEC Corporation Aterm WF1200CR and Aterm WG1200CR

Priority LOW 39

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands via SOAP inte…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00729 Published 2019-01-09 No fix listed CWE-78
TI-2021-03934 CVE-2021-20708 · GHSA-w32w-5vr5-g3ph

OS command injection in NEC Aterm devices

Priority LOW 34

NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier) allow authenticated attackers to execute arbitrary OS comma…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01217 Published 2021-04-26 No fix listed CWE-78
TI-2018-11591 CVE-2018-16194 · GHSA-rj9q-9jx8-7g8f

OS command injection in NEC Corporation Aterm WF1200CR and Aterm WG1200CR

Priority LOW 34

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01399 Published 2019-01-09 No fix listed CWE-78
TI-2021-03935 CVE-2021-20709 · GHSA-fr48-wfw6-fwg7

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware…

Priority LOW 33

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an att…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0066 Published 2021-04-26 No fix listed CWE-354
TI-2018-11589 CVE-2018-16192 · GHSA-rv22-5gfw-ccxw

Information disclosure in NEC Corporation Aterm WF1200CR and Aterm WG1200CR

Priority LOW 29

Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allow an attacker on the same network segment to obtain information registered on the device…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00499 Published 2019-01-09 No fix listed CWE-200
TI-2018-11590 CVE-2018-16193 · GHSA-hj7j-wp8f-6pq3

Cross-site scripting in NEC Corporation Aterm WF1200CR and Aterm WG1200CR

Priority LOW 25

Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to inject arbitrary web…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00532 Published 2019-01-09 No fix listed CWE-79
Open these records in search →