Skip to content
fr Sign in
7.2 High

CVE-2024-11013 Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27,…

Description

Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.15 and earlier allows a attacker to inject an arbitrary CLI commands to be executed on the device via the management interface.

Affected products and versions

Product Affected versions Fixed in
UNIVERGE IX Versions not published
UNIVERGE IX-R/IX-V Versions not published
univerge_ix 10.9 10.9 → 10.9.14 No fix stated
univerge_ix 10.8 10.8 → 10.8.27 No fix stated
univerge_ix 9.2 9.2 → 10.10.21 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of UNIVERGE IX

The 3 CVEs of UNIVERGE IX →
CVE-2025-8153 Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to… 5.1 Medium CVE-2024-11014 Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8… 4.3 Medium
Track this CVE