Read the docs

NEC Corporation

Records141All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical37CVSS 9.0–10.0
CVSS high66CVSS 7.0–8.9

Exploited now

NEC Corporation records in CISA KEV

No NEC Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Expresscluster X 19 records HIGH Aterm W300p Firmware 18 records MEDIUM Aterm Wg1200hp Firmware 17 records MEDIUM Expresscluster X Singleserversafe 17 records MEDIUM Aterm Wf300hp Firmware 16 records MEDIUM Aterm Wg1400hp Firmware 16 records MEDIUM Aterm Wg1800hp2 Firmware 16 records MEDIUM Aterm Wg1800hp Firmware 16 records MEDIUM

Records

11 records in Aterm Wg2600hs Firmware · all components

TI-2021-03937 CVE-2021-20711 · GHSA-p4fr-76vx-7r7v

OS command injection in NEC Corporation Aterm WG2600HS

Priority MEDIUM 45

Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01359 Published 2021-04-26 No fix listed CWE-78
TI-2020-04494 CVE-2020-5524 · GHSA-48x3-vgp6-cxw2

OS command injection in NEC Corporation Aterm series

Priority MEDIUM 40

Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment to execute arbitrary O…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01019 Published 2020-02-21 No fix listed CWE-78
TI-2020-04504 CVE-2020-5534 · GHSA-47fx-mr2m-65rq

OS command injection in NEC Corporation Aterm WG2600HS

Priority LOW 36

Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0087 Published 2020-02-21 No fix listed CWE-78
TI-2020-04495 CVE-2020-5525 · GHSA-m46c-jxp2-97p9

OS command injection in NEC Corporation Aterm series

Priority LOW 36

Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same network segment to execu…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0087 Published 2020-02-21 No fix listed CWE-78
TI-2021-03934 CVE-2021-20708 · GHSA-w32w-5vr5-g3ph

OS command injection in NEC Aterm devices

Priority LOW 34

NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier) allow authenticated attackers to execute arbitrary OS comma…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01217 Published 2021-04-26 No fix listed CWE-78
TI-2021-03935 CVE-2021-20709 · GHSA-fr48-wfw6-fwg7

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware…

Priority LOW 33

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an att…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0066 Published 2021-04-26 No fix listed CWE-354
TI-2020-04503 CVE-2020-5533 · GHSA-rhgf-c9m6-xg7c

Cross-site scripting in NEC Corporation Aterm WG2600HS

Priority LOW 29

Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00801 Published 2020-02-21 No fix listed CWE-79
TI-2021-03938 CVE-2021-20712 · GHSA-c7vp-4m6m-jg9v

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and…

Priority LOW 25

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00801 Published 2021-04-26 No fix listed
Open these records in search →