CVE-2020-10917

Summary: CVE-2020-10917 affects NEC ESMPRO Manager 6.42. The vulnerability is in the RMI service where unvalidated user data enables deserialization of untrusted data, allowing remote attackers to execute arbitrary code with SYSTEM privileges without authentication. No in-wild exploit details are...

CVE-2020-27859

CVE-2020-27859 affects NEC ESMPRO Manager 6.42. A vulnerability in the GetEuaLogDownloadAction class allows information disclosure through failure to validate a user-supplied path before file operations, enabling an attacker to read sensitive data in the SYSTEM context. Connected sources (e.g., Z...