NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote authenticated attackers to bypass access restriction to conduct arbitrary operations with administrative privilege via unspecified vectors.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-269,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| necplatforms | calsos_csdj-h_firmware | * |
| necplatforms | calsos_csdx(d)_firmware | * |
| necplatforms | calsos_csdj-a_firmware | * |
| necplatforms | calsos_csdx(p)_firmware | * |
| necplatforms | calsos_csdj-d_firmware | * |
| necplatforms | calsos_csdx_firmware | * |
| necplatforms | calsos_csdx(s)_firmware | * |
| necplatforms | calsos_csdj-b_firmware | * |
Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| necplatforms | calsos_csdj-h_firmware | * |
| necplatforms | calsos_csdx(d)_firmware | * |
| necplatforms | calsos_csdj-a_firmware | * |
| necplatforms | calsos_csdx(p)_firmware | * |
| necplatforms | calsos_csdj-d_firmware | * |
| necplatforms | calsos_csdx_firmware | * |
| necplatforms | calsos_csdx(s)_firmware | * |
| necplatforms | calsos_csdj-b_firmware | * |