Read the docs

NEC Corporation

Records141All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical37CVSS 9.0–10.0
CVSS high66CVSS 7.0–8.9

Exploited now

NEC Corporation records in CISA KEV

No NEC Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Expresscluster X 19 records HIGH Aterm W300p Firmware 18 records MEDIUM Aterm Wg1200hp Firmware 17 records MEDIUM Expresscluster X Singleserversafe 17 records MEDIUM Aterm Wf300hp Firmware 16 records MEDIUM Aterm Wg1400hp Firmware 16 records MEDIUM Aterm Wg1800hp2 Firmware 16 records MEDIUM Aterm Wg1800hp Firmware 16 records MEDIUM

Records

19 records in Expresscluster X · all components

TI-2022-15632 CVE-2022-34825 · GHSA-gmcp-v2jv-3qq3

Uncontrolled search path in NEC Corporation CLUSTERPRO X

Priority MEDIUM 52

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01534 Published 2022-11-08 No fix listed CWE-427
TI-2022-15631 CVE-2022-34824 · GHSA-jw3w-3gxw-82qw

Incorrect default permissions in NEC Corporation CLUSTERPRO X

Priority MEDIUM 52

Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 Si…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01402 Published 2022-11-08 No fix listed CWE-276
TI-2022-15630 CVE-2022-34823 · GHSA-qq8m-wq89-2wqp

Buffer overflow in NEC Corporation CLUSTERPRO X

Priority MEDIUM 46

Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe fo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01637 Published 2022-11-08 No fix listed CWE-120
TI-2022-15629 CVE-2022-34822 · GHSA-cxx2-36cf-cwrx

Path traversal in NEC Corporation CLUSTERPRO X

Priority MEDIUM 46

Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01781 Published 2022-11-08 No fix listed CWE-22
TI-2021-03930 CVE-2021-20704 · GHSA-w89h-3579-rj7v

Buffer overflow in NEC Corporation CLUSTERPRO X

Priority MEDIUM 46

Buffer overflow vulnerability in the compatible API with previous versions CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02142 Published 2021-11-02 No fix listed CWE-120
TI-2021-03929 CVE-2021-20703 · GHSA-wxqg-hvwv-hhhq

Buffer overflow in NEC Corporation CLUSTERPRO X

Priority MEDIUM 46

Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02142 Published 2021-11-02 No fix listed CWE-120
TI-2021-03928 CVE-2021-20702 · GHSA-cp66-cfh8-4ff4

Buffer overflow in NEC Corporation CLUSTERPRO X

Priority MEDIUM 46

Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02202 Published 2021-11-02 No fix listed CWE-120
TI-2021-03927 CVE-2021-20701 · GHSA-pm2r-r7fg-8fg9

Buffer overflow in NEC Corporation CLUSTERPRO X

Priority MEDIUM 46

Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 Sing…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02142 Published 2021-11-02 No fix listed CWE-120
TI-2021-03926 CVE-2021-20700 · GHSA-4g8c-wjf2-3f87

Buffer overflow in NEC Corporation CLUSTERPRO X

Priority MEDIUM 46

Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 Sing…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02142 Published 2021-11-02 No fix listed CWE-120
TI-2023-20680 CVE-2023-39548 · GHSA-3wg4-x8pv-x63w

Unrestricted file upload in NEC Corporation CLUSTERPRO X

Priority MEDIUM 41

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execut…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00743 Published 2023-11-17 No fix listed CWE-434
TI-2023-20679 CVE-2023-39547 · GHSA-vrjx-2rqq-2j39

Authentication bypass by capture-replay in NEC Corporation CLUSTERPRO X

Priority MEDIUM 41

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execut…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00632 Published 2023-11-17 No fix listed CWE-294
TI-2023-20678 CVE-2023-39546 · GHSA-9c6c-9p8c-7g7v

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X…

Priority MEDIUM 41

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execut…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00632 Published 2023-11-17 No fix listed CWE-836
TI-2023-20677 CVE-2023-39545 · GHSA-g487-4fjg-h9j4

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X…

Priority MEDIUM 41

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execut…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00743 Published 2023-11-17 No fix listed CWE-552
TI-2023-20676 CVE-2023-39544 · GHSA-9vh9-pgv9-hw48

Missing authorization in NEC Corporation CLUSTERPRO X

Priority MEDIUM 41

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execut…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00632 Published 2023-11-17 No fix listed CWE-862
TI-2021-03933 CVE-2021-20707 · GHSA-3jw5-8hpm-44m2

Improper input validation in NEC Corporation CLUSTERPRO X

Priority LOW 35

Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESS…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00986 Published 2021-11-02 No fix listed CWE-20
TI-2021-03932 CVE-2021-20706 · GHSA-3fvr-47g6-5g62

Improper input validation in NEC Corporation CLUSTERPRO X

Priority LOW 35

Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01114 Published 2021-11-02 No fix listed CWE-20
TI-2021-03931 CVE-2021-20705 · GHSA-jjm6-73pr-62rw

Improper input validation in NEC Corporation CLUSTERPRO X

Priority LOW 35

Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01114 Published 2021-11-02 No fix listed CWE-20
Open these records in search →