What’s Vulnerable › Vulnerabilities
CVE-2024-11013
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-11-29 · updated 2026-06-17
- Weakness: CWE-77
Description
Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.15 and earlier allows a attacker to inject an arbitrary CLI commands to be executed on the device via the management interface.
Affected products
- NEC Corporation UNIVERGE IX: from 9.2 through 10.10.21; from 10.8 through 10.8.27; from 10.9 through 10.9.14
References
Get alerted when CVE-2024-11013 or the next vulnerability affects your stack