Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNec Expresscluster X
APPNec≤ 5.0Nec Expresscluster X Singleserversafe
APPNec≤ 5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEAuth Bypass
Related vulnerabilities
CVE-2022-34824CRITICAL9.8PL ✓same product
Słabe uprawnienia do plików umożliwiają RCE w NEC EXPRESSCLUSTER X
CVE-2022-34823CRITICAL9.8PL ✓same product
Buffer overflow w NEC EXPRESSCLUSTER X — RCE bez uwierzytelnienia
CVE-2022-34822CRITICAL9.8PL ✓same product
Path traversal umożliwiający RCE w NEC EXPRESSCLUSTER X dla Windows
CVE-2021-20700CRITICAL9.8PL ✓same product
Buffer overflow w Disk Agent NEC CLUSTERPRO/EXPRESSCLUSTER X — RCE przez sieć
CVE-2021-20702CRITICAL9.8PL ✓same product
Buffer overflow w Transaction Server NEC CLUSTERPRO/EXPRESSCLUSTER X — RCE przez sieć