NEC Corporation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WG600HP | 12 | – | Mar 28, 2024 |
| WG1810HP(MF) | 12 | – | Mar 28, 2024 |
| WF1200HP2 | 12 | – | Mar 28, 2024 |
| WF1200HP | 12 | – | Mar 28, 2024 |
| WG1200HS3 | 12 | – | Mar 28, 2024 |
| WM3600R | 12 | – | Mar 28, 2024 |
| WM3800R | 12 | – | Mar 28, 2024 |
| WR7800H | 12 | – | Mar 28, 2024 |
| WR9300N | 12 | – | Mar 28, 2024 |
| WG2200HP | 12 | – | Mar 28, 2024 |
| WR8400N | 12 | – | Mar 28, 2024 |
| WR8750N | 12 | – | Mar 28, 2024 |
| WR7870S | 12 | – | Mar 28, 2024 |
| MR01LN | 12 | – | Mar 28, 2024 |
| WF300HP2 | 12 | – | Mar 28, 2024 |
| WG1200HS | 12 | – | Mar 28, 2024 |
| WR8175N | 12 | – | Mar 28, 2024 |
| W300P | 12 | – | Mar 28, 2024 |
| WM3450RN | 12 | – | Mar 28, 2024 |
| WG1200HP2 | 12 | – | Mar 28, 2024 |
| WG1200HP | 12 | – | Mar 28, 2024 |
| WR8160N | 12 | – | Mar 28, 2024 |
| WR6600H | 12 | – | Mar 28, 2024 |
| WR8165N | 12 | – | Mar 28, 2024 |
| WR9500N | 12 | – | Mar 28, 2024 |
| WG300HP | 12 | – | Mar 28, 2024 |
| WM3400RN | 12 | – | Mar 28, 2024 |
| WR4100N | 12 | – | Mar 28, 2024 |
| WR8500N | 12 | – | Mar 28, 2024 |
| WG1810HP(JE) | 12 | – | Mar 28, 2024 |
| WG1800HP | 12 | – | Mar 28, 2024 |
| MR02LN | 12 | – | Mar 28, 2024 |
| W1200EX(-MS) | 12 | – | Mar 28, 2024 |
| WR1200H | 12 | – | Mar 28, 2024 |
| WR8150N | 12 | – | Mar 28, 2024 |
| WR6650S | 12 | – | Mar 28, 2024 |
| WR8300N | 12 | – | Mar 28, 2024 |
| WM3500R | 12 | – | Mar 28, 2024 |
| WG1900HP2 | 12 | – | Mar 28, 2024 |
| WR4500N | 12 | – | Mar 28, 2024 |
| WF300HP | 12 | – | Mar 28, 2024 |
| WG1800HP3 | 12 | – | Mar 28, 2024 |
| WG1200HP3 | 12 | – | Mar 28, 2024 |
| WR8700N | 12 | – | Mar 28, 2024 |
| WR7850S | 12 | – | Mar 28, 2024 |
| WG1400HP | 12 | – | Mar 28, 2024 |
| CR2500P | 12 | – | Mar 28, 2024 |
| WR6670S | 12 | – | Mar 28, 2024 |
| WG1800HP2 | 12 | – | Mar 28, 2024 |
| WF800HP | 12 | – | Mar 28, 2024 |
| WR8200N | 12 | – | Mar 28, 2024 |
| CLUSTERPRO X | 12 | – | Nov 8, 2022 |
| WR8166N | 12 | – | Mar 28, 2024 |
| WR8100N | 12 | – | Mar 28, 2024 |
| WR8170N | 12 | – | Mar 28, 2024 |
| WR8600N | 12 | – | Mar 28, 2024 |
| WG1900HP | 12 | – | Mar 28, 2024 |
| WG1200HS2 | 12 | – | Mar 28, 2024 |
| WG1800HP4 | 12 | – | Mar 28, 2024 |
| WR8370N | 12 | – | Mar 28, 2024 |
| CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe) | 5 | – | Nov 17, 2023 |
| Aterm WG300HP | 4 | – | Jun 28, 2023 |
| Aterm WG1800HP | 4 | – | Jun 28, 2023 |
| Aterm WR8175N | 4 | – | Jun 28, 2023 |
| Aterm WR8170N | 4 | – | Jun 28, 2023 |
| Aterm WR8700N | 4 | – | Jun 28, 2023 |
| CLUSTERPRO X (EXPRESSCLUSTER X) | 4 | – | Nov 17, 2023 |
| Aterm WR9300N | 4 | – | Jun 28, 2023 |
| Aterm WG1400HP | 4 | – | Jun 28, 2023 |
| NEC Aterm devices | 4 | – | Apr 26, 2021 |
| Aterm WR9500N | 4 | – | Jun 28, 2023 |
| Aterm WR8750N | 4 | – | Jun 28, 2023 |
| Aterm WG2600HS | 4 | – | Apr 26, 2021 |
| Aterm WG2200HP | 4 | – | Jun 28, 2023 |
| Aterm WF300HP | 4 | – | Jun 28, 2023 |
| Aterm WR8370N | 4 | – | Jun 28, 2023 |
| Aterm WG2600HP2 | 4 | – | Jun 28, 2023 |
| Aterm WG2600HP | 4 | – | Jun 28, 2023 |
| Aterm WG600HP | 4 | – | Jun 28, 2023 |
| Aterm WR8600N | 4 | – | Jun 28, 2023 |
| Aterm WG1800HP2 | 4 | – | Jun 28, 2023 |
| UNIVERGE IX | 3 | – | Sep 17, 2025 |
| UNIVERGE IX-R/IX-V | 3 | – | Sep 7, 2026 |
| Aterm SA3500G | 3 | – | Dec 14, 2020 |
| WG2600HM4 | 2 | – | Jan 15, 2025 |
| Aterm WG2600HP and Aterm WG2600HP2 | 2 | – | Jan 28, 2021 |
| WG2600HS2 | 2 | – | Jan 15, 2025 |
| Aterm series | 2 | – | Feb 21, 2020 |
| WX4200D5 | 2 | – | Jan 15, 2025 |
| UNIVERGE SV9500/SV8500 series | 2 | – | Jan 13, 2021 |
| WX3000HP | 2 | – | Jan 15, 2025 |
| WG2600HS | 2 | – | Jan 15, 2025 |
| WG2600HP4 | 2 | – | Jan 15, 2025 |
| PC settings tool | 1 | – | Feb 15, 2023 |
| InfoCage SiteShell series | 1 | – | Oct 6, 2020 |
| Management software for NEC Storage disk array system | 1 | – | Dec 24, 2020 |
| WX1500HP | 1 | – | Jan 15, 2025 |
| CLUSTERPRO X(EXPRESSCLUSTER X) | 1 | – | Nov 17, 2023 |
| FFRI AMC for ActSecure χ | 1 | – | Jul 30, 2024 |
| CLUSTERPRO X SingleServerSafe for Linux (EXPRESSCLUSTER X SingleServerSafe for Linux) | 1 | – | Nov 7, 2025 |
| WG1200CR | 1 | – | Jan 15, 2025 |
| WX3600HP | 1 | – | Jan 15, 2025 |
| CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux) | 1 | – | Nov 7, 2025 |
| Aterm WF800HP | 1 | – | Jan 28, 2021 |
| WebSAM DeploymentManager | 1 | – | Jan 21, 2025 |
| ExpressUpdate Agent for Windows | 1 | – | Jun 26, 2026 |
| RakurakuMusen Start EX | 1 | – | Nov 19, 2025 |
| ActSecure χ | 1 | – | Aug 9, 2023 |
| WF1200CR | 1 | – | Jan 15, 2025 |
| Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied | 1 | – | Jan 13, 2021 |
| GB1200PE | 1 | – | Jan 15, 2025 |
Exploited and recent CVEs
- CVE-2026-16876 An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and se 0.6%
- CVE-2026-8797 An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges. 0.1%
- CVE-2025-12852 DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker to manipulate the PC environment to cause unintended operations on the user's device. 0.1%
- CVE-2025-11546 CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSC 0.4%
- CVE-2025-11546 CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSC 0.4%
- CVE-2025-8153 Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10. 0.3%
- CVE-2025-8153 Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10. 0.3%
- CVE-2024-6466 NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified. 0.3%
- CVE-2025-0356 NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the network. 0.6%
- CVE-2025-0356 NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the network. 0.6%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0355 Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 0.5%
- CVE-2025-0354 Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP 0.2%
- CVE-2025-0354 Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP 0.2%
- CVE-2025-0354 Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP 0.2%
- CVE-2025-0354 Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP 0.2%
- CVE-2025-0354 Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP 0.2%
- CVE-2025-0354 Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP 0.2%
- CVE-2024-11014 Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and for Ver10.9 up to Ver10.9.14 allows a attacker to hijack the 0.2%
- CVE-2024-11013 Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.15 and earlier allow 1.1%
- CVE-2024-11013 Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.15 and earlier allow 1.1%
- CVE-2024-40895 FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain cond 0.5%
- CVE-2024-28013 Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF30 0.4%