CVE-2020-5685: Nec Univerge SV8500 Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) condition by sending a specially crafted request to a specific URL.

Affected products

  • Nec Univerge SV8500 Firmware: from s6, up to and including s8
  • Nec Univerge SV9500 Firmware: from v1, up to and including v7

Published 2021-01-13. Last modified 2026-06-17.