CVE-2022-34824: Nec Expresscluster X

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code.

Affected products

• Nec Expresscluster X: up to and including 5.0
• Nec Expresscluster X Singleserversafe: up to and including 5.0

Published 2022-11-08. Last modified 2026-06-17.