Nec Ews-Ux V vulnerabilities

5 CVEs affecting Nec Ews-Ux V, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-0024, published 1997-08-13.

More from Nec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-0208, published 1995-12-12. High severity, CVSS 10.0. EPSS: 12.9% chance of exploitation in the next 30 days. rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
• CVE-1999-0024, published 1997-08-13. Medium severity, CVSS 5.0. EPSS: 5% chance of exploitation in the next 30 days. DNS cache poisoning via BIND, by predictable query IDs.
• CVE-1999-0048, published 1997-01-27. High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days. Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
• CVE-1999-0040, published 1997-05-01. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
• CVE-1999-0138, published 1996-06-26. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.