702 matches found
Ghidra_v810_v830
Ghidra processor description module for NEC/Renesas v810 and v830 families These modules were made by taking the v850 modules that come with Ghidra as a template and rewriting them to work with v810 and v830 family instructions. 1. V810 description based on User’s Manual: V810 Architecture link 2...
nec_aterm_tools
necatermtools This repo contains two tools developed to gain shell on NEC Aterm routers: 1. nec-aterm-firmware-config-extractor: extracts the HWRANDOMKEY from a firmware image. This key is needed to gereate a valid passord for logging in. 2. rakuraku-nec-shell: extracts the HWRANDOMKEY from a QR...
CVE-2026-113364
Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary code with SYSTEM privileges via a crafted packet with a malformed data size value ...
CVE-2026-113363
Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet...
EUVD-2026-119798
Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary code with SYSTEM privileges via a crafted packet with a malformed data size value ...
CVE-2026-113363
Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet...
EUVD-2026-119797
Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet...
CVE-2026-113363: NEC Corporation WebSAM WinShare: Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through…
Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet...
CVE-2026-113364: NEC Corporation WebSAM WinShare: Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and…
Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary code with SYSTEM privileges via a crafted packet with a malformed data size value ...
CVE-2026-113362: NEC Corporation WebSAM WinShare: Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier…
Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier excluding Ver 7.3.3, Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges via a...
PT-2026-140227
Name of the Vulnerable Software and Affected Versions NEC Corporation WebSAM WinShare versions 7.2.0 through 7.5.0 NEC Corporation WebSAM WinShare version 7.6.0 NEC Corporation WebSAM WinShare versions 7.7.0 through 7.7.2 Description Improper input validation in the network communication processi...
UNIVERGE IX-R/IX-V series routers vulnerable to missing authentication for critical function
Overview UNIVERGE IX-R/IX-V series routers provided by NEC Corporation contain the following vulnerability. Missing authentication for critical function CWE-306 - CVE-2026-16876 Kojiro Enokida of SOPHOS reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
Astra Linux – vulnerability in linux-6.12, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 one with a start/stop bug, one without were observed to cause IOMMU faults following several Missed Service Errors. The...
NEC Aterm series vulnerable to cross-site scripting (NV26-002)
Overview Aterm series products provided by NEC Corporation contain the following vulnerability. Cross-site scripting CWE-79 - CVE-2026-6059 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...
NEC Aterm series vulnerable to OS command injection (NV26-003)
Overview NEC Aterm series products provided by NEC Corporation contain the following vulnerability. OS command injection CWE-78 - CVE-2026-8652 So Kato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
CVE-2026-4621
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network...
CVE-2026-4619
Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network...
CVE-2026-4620
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network...