Priority MEDIUM 52
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01484 · Published 2023-11-30 · No fix listed CWE-78
Priority MEDIUM 48
NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00682 · Published 2024-05-09 · No fix listed CWE-912
Priority MEDIUM 45
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 an…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01442 · Published 2022-03-11 · No fix listed CWE-78
Priority MEDIUM 40
An OS Command Injection vulnerability exists in Aterm.
CVSS 4.0HIGH 8.5· Adjacent network · High privileges · No interaction · EPSS 0.00722 · Published 2026-05-25 · No fix listed CWE-78
Priority MEDIUM 40
Aterm SA3500G firmware versions prior to Ver.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01065 · Published 2020-12-14 · No fix listed CWE-78
Priority MEDIUM 40
NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.0…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01078 · Published 2018-07-26 · No fix listed CWE-269
Priority LOW 35
OS Command Injection vulnerability in NEC Platforms, Ltd.
CVSS 4.0HIGH 7.1· Network · High privileges · User interaction · EPSS 0.00879 · Published 2026-03-27 · No fix listed CWE-78
Priority LOW 35
OS Command Injection vulnerability in NEC Platforms, Ltd.
CVSS 4.0HIGH 7.1· Network · High privileges · User interaction · EPSS 0.01014 · Published 2026-03-27 · No fix listed CWE-78
Priority LOW 31
Aterm SA3500G firmware versions prior to Ver.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00763 · Published 2020-12-14 · No fix listed CWE-78
Priority LOW 30
Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00376 · Published 2020-12-14 · No fix listed CWE-354
Priority LOW 29
Path Traversal vulnerability in NEC Platforms, Ltd.
CVSS 4.0MEDIUM 6.0· Network · High privileges · No interaction · EPSS 0.00326 · Published 2026-03-27 · No fix listed CWE-22
Priority LOW 29
Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00788 · Published 2018-07-26 · No fix listed CWE-79
Priority LOW 27
Hidden Functionality vulnerability in NEC Platforms, Ltd.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00163 · Published 2026-03-27 · No fix listed CWE-912
Priority LOW 27
Missing Authorization vulnerability in NEC Platforms, Ltd.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00144 · Published 2026-03-27 · No fix listed CWE-862
Priority LOW 27
Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows remote attackers to bypass access restriction and to obtain unauthorized histori…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01234 · Published 2021-02-17 · No fix listed CWE-276
Priority LOW 21
A cross-site scripting vulnerability exists in Aterm.
CVSS 4.0MEDIUM 4.8· Adjacent network · No auth · User interaction · EPSS 0.00179 · Published 2026-05-25 · No fix listed CWE-79
Priority LOW 17
UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause sy…
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00952 · Published 2021-03-26 · No fix listed
THREATIST.IORead the docs