Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-11013

Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NEC

Description

Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.15 and earlier allows a attacker to inject an arbitrary CLI commands to be executed on the device via the management interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NEC Corporation UNIVERGE IX

Default version status: unknown

  • from Ver9.2 to Ver10.10.21affected

NEC Corporation UNIVERGE IX

Default version status: unknown

  • for Ver10.8 up to Ver10.8.27affected

NEC Corporation UNIVERGE IX

Default version status: unknown

  • for Ver10.9 up to Ver10.9.14affected

NEC Corporation UNIVERGE IX-R/IX-V

Default version status: unknown

  • Ver1.2.15 and earlieraffected

References