CVE-2021-20703

CVE-2021-20703 is a buffer overflow vulnerability in NEC CLUSTERPRO X and EXPRESSCLUSTER X, affecting the Transaction Server on Windows up to version 4.3 (and SingleServerSafe variants). The root cause is memory/bounds corruption in the Transaction Server allowing remote code execution via networ...

CVE-2021-20706

CVE-2021-20706 is an improper input validation vulnerability in NEC CLUSTERPRO X and EXPRESSCLUSTER X WebManager that permits a remote attacker to upload files via the network. Affected products and versions include CLUSTERPRO X 4.3 for Windows (and earlier), EXPRESSCLUSTER X 4.3 for Windows (and...

CVE-2021-20700

CVE-2021-20700 affects NEC’s CLUSTERPRO X and EXPRESSCLUSTER X (Windows) up to 4.3 and related SingleServerSafe variants. The vulnerability is a Buffer overflow in the Disk Agent (CWE-119) that can allow remote code execution over the network. Affected components include Disk Agent, Transaction S...

CVE-2021-20701

CVE-2021-20701 affects NEC CLUSTERPRO X 4.3 for Windows and EXPRESSCLUSTER X 4.3 for Windows (and SingleServerSafe variants) with a Disk Agent buffer overflow (CWE-119) that can enable remote code execution over the network. Public documents identify the vulnerable components as Disk Agent and re...

CVE-2021-20704

Summary of CVE-2021-20704 : NEC’s CLUSTERPRO X and EXPRESSCLUSTER X vulnerable to a buffer overflow in the API compatible with previous versions (Ver 8.0 and earlier). The flaw allows remote code execution over a network on affected software, including CLUSTERPRO X 4.3 for Windows, EXPRESSCLUSTER...

CVE-2021-20705

The CVE-2021-20705 entry concerns NEC CLUSTERPRO/EXPRESSCLUSTER X WebManager with an input-validation vulnerability that allows a remote attacker to upload arbitrary files via the network. Affected products include CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and ear...

CVE-2021-20707

CVE-2021-20707 is an input-validation vulnerability in NEC ClusterPRO X and EXPRESSCLUSTER X, specifically affecting the Transaction Server. Multiple sources (NVD/NJC/JVN/Red Hat, PRION) describe that versions up to 4.3 for Windows and earlier, including 4.3 SingleServerSafe variants, allow a rem...

CVE-2021-20702

CVE-2021-20702 is a buffer overflow vulnerability in NEC CLUSTERPRO X/EXPRESSCLUSTER X products. The Transaction Server component in CLUSTERPRO X 4.3 for Windows and earlier, and EXPRESSCLUSTER X 4.3 for Windows and earlier (including SingleServerSafe variants) is affected, with the underlying is...