CVE-2021-20680

Cross-site scripting vulnerability in NEC Aterm devices Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier,...

NEC Aterm Information Disclosure Vulnerability

The NEC Aterm is a wireless router from Nippon Electric NEC. NEC Aterm is vulnerable to an information disclosure vulnerability that could allow a remote user to execute arbitrary shell commands on the target system. No details of the vulnerability are provided at this time...

Multiple vulnerabilities in multiple Aterm products

Overview Multiple Aterm products provided by NEC Corporation contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2021-20680 OS command injection via UPnP CWE-78 - CVE-2014-8361 CVE-2021-20680 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this...

JVN#29739718: Multiple vulnerabilities in Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP

Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP provided by NEC Corporation contain multiple vulnerabilities listed below. Aterm WF1200CR, Aterm WG1200CR, and Aterm WG2600HS OS Command Injection CWE-78 - CVE-2021-20708 Version| Vector| Score ---|---|--- CVSS v3|...

JVN#67456944: Multiple vulnerabilities in multiple Aterm products

Multiple Aterm products provided by NEC Corporation contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2021-20680 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base Score...

NEC Aterm WF1200C 操作系统命令注入漏洞

The NEC Aterm WF1200C is a wireless router from Nippon Electric NEC. A security vulnerability exists in Aterm WF1200CR: version 1.3.2, version 1.3.3, and version 1.5.1, which allows remote users to execute arbitrary shell commands on the target system...

NEC Calsos CSDJ Authorization Issues Vulnerability

NEC Calsos CSDJ is a monitoring device from NEC Corporation of Japan. It provides IoT-enabled remote monitoring systems in various industries such as water and wastewater, manufacturing and agriculture. An authorization issue vulnerability exists in Calsos CSDJ that stems from a lack of...

JVN#87164507: Calsos CSDJ fails to restrict access permissions

Calsos CSDJ provided by NEC Platforms, Ltd. fails to restrict access permissions CWE-264, which may lead to an unauthorized user being able to view the historical data without access privileges. Impact A user who can login to the product may obtain unauthorized historical data without access...

NEC ESMPRO Manager Information Disclosure Vulnerability

NEC ESMPRO Manager is a product from Nippon Electric NEC for managing NEC servers. The product supports management monitoring of server CPU load, memory usage, disk usage, server's hard disk protection status and LAN traffic status. A security vulnerability exists in NEC ESMPRO Manager version 6....

Cross-Site Scripting Vulnerability in Multiple NEC Aterm Products

The NEC Aterm WG2600HP and others are a wireless router from NEC Corporation of Japan. A cross-site scripting vulnerability exists in multiple Aterm products, which stems from a lack of proper validation of client-side data by the WEB application. The vulnerability can be exploited by an attacker...

Cross-Site Request Forgery Vulnerability in Multiple NEC Aterm Products

The NEC Aterm WG2600HP and others are a wireless router from NEC Corporation of Japan. A cross-site request forgery vulnerability exists in multiple Aterm products, which originates from a WEB application that does not adequately verify that a request is from a trusted user. An attacker could...

CVE-2020-27859

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of...

CVE-2020-27859

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of...

CVE-2020-27859

CVE-2020-27859 affects NEC ESMPRO Manager 6.42. A vulnerability in the GetEuaLogDownloadAction class allows information disclosure through failure to validate a user-supplied path before file operations, enabling an attacker to read sensitive data in the SYSTEM context. Connected sources (e.g., Z...

CVE-2020-5633

Multiple NEC products Express5800/T110j, Express5800/T110j-S, Express5800/T110j 2nd-Gen, Express5800/T110j-S 2nd-Gen, iStorage NS100Ti, and Express5800/GT110j where Baseboard Management Controller BMC firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and the...

CVE-2020-5633

Multiple NEC products Express5800/T110j, Express5800/T110j-S, Express5800/T110j 2nd-Gen, Express5800/T110j-S 2nd-Gen, iStorage NS100Ti, and Express5800/GT110j where Baseboard Management Controller BMC firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and the...

CVE-2020-5633

Multiple NEC products Express5800/T110j, Express5800/T110j-S, Express5800/T110j 2nd-Gen, Express5800/T110j-S 2nd-Gen, iStorage NS100Ti, and Express5800/GT110j where Baseboard Management Controller BMC firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and the...

Authentication flaw

Multiple NEC products Express5800/T110j, Express5800/T110j-S, Express5800/T110j 2nd-Gen, Express5800/T110j-S 2nd-Gen, iStorage NS100Ti, and Express5800/GT110j where Baseboard Management Controller BMC firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and the...

CVE-2020-5633

Multiple NEC products Express5800/T110j, Express5800/T110j-S, Express5800/T110j 2nd-Gen, Express5800/T110j-S 2nd-Gen, iStorage NS100Ti, and Express5800/GT110j where Baseboard Management Controller BMC firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and the...