Vulnerabilities

TI-2026-07601 CVE-2026-8652 · GHSA-2ww7-hqm8-2qhf

OS command injection in NEC Platforms, Ltd. Aterm MR51FN

MEDIUM 40

An OS Command Injection vulnerability exists in Aterm.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.00722 Published 2026-05-25 No fix listed CWE-78

TI-2026-05314 CVE-2026-6059 · GHSA-g9r3-rg2f-3r96

Cross-site scripting in NEC Platforms, Ltd. Aterm WX1800HP

LOW 21

A cross-site scripting vulnerability exists in Aterm.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00179 Published 2026-05-25 No fix listed CWE-79

TI-2026-04022 CVE-2026-4620 · GHSA-w9fh-jrgw-339x

OS command injection in NEC Platforms, Ltd. Aterm WX1500HP

LOW 35

OS Command Injection vulnerability in NEC Platforms, Ltd.

CVSS 4.0HIGH 7.1 Network High privileges User interaction EPSS 0.01014 Published 2026-03-27 No fix listed CWE-78

TI-2026-04024 CVE-2026-4622 · GHSA-3p29-8vc6-r2ph

OS command injection in NEC Platforms, Ltd. Aterm WG2600HS

LOW 35

OS Command Injection vulnerability in NEC Platforms, Ltd.

CVSS 4.0HIGH 7.1 Network High privileges User interaction EPSS 0.00879 Published 2026-03-27 No fix listed CWE-78

TI-2026-04023 CVE-2026-4621 · GHSA-v782-gww8-28q2

Hidden Functionality vulnerability in NEC Platforms, Ltd.

LOW 27

Hidden Functionality vulnerability in NEC Platforms, Ltd.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00163 Published 2026-03-27 No fix listed CWE-912

TI-2026-04021 CVE-2026-4619 · GHSA-73jj-x3w6-c78g

Path traversal in NEC Platforms, Ltd. Aterm WX3600HP

LOW 29

Path Traversal vulnerability in NEC Platforms, Ltd.

CVSS 4.0MEDIUM 6.0 Network High privileges No interaction EPSS 0.00326 Published 2026-03-27 No fix listed CWE-22

TI-2026-03752 CVE-2026-4309 · GHSA-gqp3-283g-mgqc

Missing authorization in NEC Platforms, Ltd. Aterm W1200EX

LOW 27

Missing Authorization vulnerability in NEC Platforms, Ltd.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00144 Published 2026-03-27 No fix listed CWE-862

TI-2024-02823 CVE-2024-3016 · GHSA-cv9w-4mcm-4cc2

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an…

MEDIUM 48

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00682 Published 2024-05-09 No fix listed CWE-912

TI-2023-03494 CVE-2023-3741 · GHSA-56j6-4wv9-3jgh

OS command injection in NEC Platforms, Ltd. ITK-6DGS-1 TEL

MEDIUM 52

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01484 Published 2023-11-30 No fix listed CWE-78

TI-2022-09210 CVE-2022-25621 · GHSA-qf23-6cwx-8x7w

OS command injection in NEC Platforms, Ltd. UNIVERGE DT

MEDIUM 45

UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 an…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01442 Published 2022-03-11 No fix listed CWE-78

TI-2021-03903 CVE-2021-20677 · GHSA-xwf3-pcvx-xf5j

UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from…

LOW 17

UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause sy…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00952 Published 2021-03-26 No fix listed

TI-2021-03880 CVE-2021-20653 · GHSA-2h56-v244-fqpv

Incorrect default permissions in NEC Platforms, Ltd. Calsos CSDJ

LOW 27

Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows remote attackers to bypass access restriction and to obtain unauthorized histori…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01234 Published 2021-02-17 No fix listed CWE-276

TI-2020-04604 CVE-2020-5637 · GHSA-446c-h2fq-7hw2

Improper validation of integrity check value vulnerability in Aterm SA3500G firmware…

LOW 30

Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00376 Published 2020-12-14 No fix listed CWE-354

TI-2020-04603 CVE-2020-5636 · GHSA-3rqh-g6r9-mr2r

OS command injection in NEC Corporation Aterm SA3500G

LOW 31

Aterm SA3500G firmware versions prior to Ver.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00763 Published 2020-12-14 No fix listed CWE-78

TI-2020-04602 CVE-2020-5635 · GHSA-fxv5-3xrg-jgx5

OS command injection in NEC Corporation Aterm SA3500G

MEDIUM 40

Aterm SA3500G firmware versions prior to Ver.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01065 Published 2020-12-14 No fix listed CWE-78

TI-2018-00571 CVE-2018-0614 · GHSA-8r77-6885-9g5c

Cross-site scripting in NEC Platforms, Ltd. Calsos CSDX and CSDJ series products

LOW 29

Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2018-07-26 No fix listed CWE-79

TI-2018-00570 CVE-2018-0613 · GHSA-w8v2-8j35-xjpg

Improper privilege management in NEC Platforms, Ltd. Calsos CSDX and CSDJ series products

MEDIUM 40

NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.0…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01078 Published 2018-07-26 No fix listed CWE-269

Vulnerabilities

Filters