Nec vulnerabilitiesNone on the known-exploited list.
Nec has 117 published vulnerabilities across 332 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Expresscluster X, with 19. If you run Nec software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Nec products have the most vulnerabilities?
Expresscluster X leads with 19 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Nec vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Nec's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Nec flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 69%CVE-2020-17408High
This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1.
- 45%CVE-1999-0043Critical
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
- 29%CVE-1999-0009Critical
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
- 18%CVE-2018-11741Critical
NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs.
- 15%CVE-2020-12695High
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified...
- 14%CVE-2018-11742Critical
NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.
- 13%CVE-1999-0208Critical
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
- 6.9%CVE-2002-2368Critical
Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the...
- 5.6%CVE-2020-10917Critical
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NEC ESMPRO Manager 6.42.
- 5.5%CVE-1999-0011Medium
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
All Nec products we track.
64 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Expresscluster Xexpresscluster_x19 vulnerabilities13 versions
- Aterm W300p Firmwareaterm_w300p_firmware18 vulnerabilities3 versions
- Aterm Wg1200hp Firmwareaterm_wg1200hp_firmware17 vulnerabilities2 versions
- Expresscluster X Singleserversafeexpresscluster_x_singleserversafe17 vulnerabilities13 versions
- Aterm W1200ex-Ms Firmwareaterm_w1200ex-ms_firmware13 vulnerabilities1 version
- Aterm Wg1200hp2 Firmwareaterm_wg1200hp2_firmware13 vulnerabilities1 version
- Aterm Wg1200hp3 Firmwareaterm_wg1200hp3_firmware13 vulnerabilities1 version
- Aterm Wg1200hs2 Firmwareaterm_wg1200hs2_firmware13 vulnerabilities1 version
- Aterm Wg1200hs3 Firmwareaterm_wg1200hs3_firmware13 vulnerabilities1 version
- Aterm Wg1800hp3 Firmwareaterm_wg1800hp3_firmware13 vulnerabilities1 version
- Aterm Wg1800hp4 Firmwareaterm_wg1800hp4_firmware13 vulnerabilities1 version
- Aterm Wg1900hp Firmwareaterm_wg1900hp_firmware13 vulnerabilities1 version
- Aterm Wg1900hp2 Firmwareaterm_wg1900hp2_firmware13 vulnerabilities1 version
- Asl Ux 4800asl_ux_48008 vulnerabilities3 versions
- Aterm Hc100rc Firmwareaterm_hc100rc_firmware8 vulnerabilities1 version
- Aterm Wg1200cr Firmwareaterm_wg1200cr_firmware8 vulnerabilities4 versions
- Aterm Wg2600hs Firmwareaterm_wg2600hs_firmware8 vulnerabilities2 versions
- Clusterpro Xclusterpro_x8 vulnerabilities1 version
- Clusterpro X Singleserversafeclusterpro_x_singleserversafe8 vulnerabilities1 version
- Aterm Wf1200cr Firmwareaterm_wf1200cr_firmware6 vulnerabilities3 versions
- Sv9100 Firmwaresv9100_firmware6 vulnerabilities2 versions
- Up-Ux Vup-ux_v6 vulnerabilities1 version
- Ews-Ux Vews-ux_v5 vulnerabilities2 versions
- Sv8100 Firmwaresv8100_firmware5 vulnerabilities1 version
This directory lists the 64 Nec products with at least one tracked version, of 332 in our catalogue.
Running Nec? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the clpwebmc executable. Due to the improper restriction of XML External Entity (XXE) references, a specially-crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-10801.
- Matched to
- Nec on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 117 published vulnerabilities across 332 products and 149 versions from Nec.
None of Nec's vulnerabilities is on the list of flaws known to be exploited today.
Expresscluster X, with 19 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Nec products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.