What’s Vulnerable › Vulnerabilities
CVE-2024-11014
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-11-29 · updated 2026-06-17
- Weakness: CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and for Ver10.9 up to Ver10.9.14 allows a attacker to hijack the authentication of screens on the device via the management interface.
Affected products
- NEC Corporation UNIVERGE IX: from from Ver9.2 through Ver10.10.21; from for Ver10.8 up through Ver10.8.27; from for Ver10.9 up through Ver10.9.14
References
Get alerted when CVE-2024-11014 or the next vulnerability affects your stack