Expresscluster X vulnerabilities

9 known vulnerabilities in Expresscluster X from NEC. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CLUSTERPRO X (EXPRESSCLUSTER X): Unrestricted Upload of File with Dangerous Type

  CVE-2023-39548Nov 17, 2023NEC

  CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

• 8.8 High severity

  CLUSTERPRO X (EXPRESSCLUSTER X): Authentication Bypass by Capture-replay

  CVE-2023-39547Nov 17, 2023NEC

  CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

• 8.8 High severity

  CLUSTERPRO X (EXPRESSCLUSTER X): Use of Password Hash Instead of Password for Authentication

  CVE-2023-39546Nov 17, 2023NEC

  CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

• 8.8 High severity

  CLUSTERPRO X (EXPRESSCLUSTER X): Files or Directories Accessible to External Parties

  CVE-2023-39545Nov 17, 2023NEC

  CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

• 8.8 High severity

  CLUSTERPRO X(EXPRESSCLUSTER X): Missing Authorization

  CVE-2023-39544Nov 17, 2023NEC

  CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

• 9.8 Critical severity

  CLUSTERPRO X: Uncontrolled Search Path Element

  CVE-2022-34825Nov 8, 2022NECEPSS 1.52%

  Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote

• 9.8 Critical severity

  CLUSTERPRO X: Incorrect Default Permissions

  CVE-2022-34824Nov 8, 2022NECEPSS 1.39%

  Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier a

• 9.8 Critical severity

  CLUSTERPRO X: Buffer Copy without Checking Size of Input

  CVE-2022-34823Nov 8, 2022NECEPSS 1.62%

  Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote un

• 9.8 Critical severity

  CLUSTERPRO X: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-34822Nov 8, 2022NECEPSS 1.77%

  Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote una