Most recent entries from all

EUVD-2026-226896

fkie_cve-2025-0356

NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the network.

GHSA-hxq9-x56x-xjc2

NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the internet.

jvndb-2025-000002

Aterm series provided by NEC Corporation contains multiple vulnerabilities listed below. <ul> <li>Stored Cross-site Scripting (CWE-79) - CVE-2025-0354</li> <li>Missing Authentication for Critical Function (CWE-306) - CVE-2025-0355</li> <li>OOS Command Injection (CWE-78) - CVE-2025-0356</li> </ul> CVE-2025-0354, CVE-2025-0355 Takayuki Sasaki and Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2025-0356 Kakeru Kajihara of NTT Security Holdings reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.