Nec Up-Ux V vulnerabilities

6 CVEs affecting Nec Up-Ux V, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-0024, published 1997-08-13.

More from Nec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-0208, published 1995-12-12. High severity, CVSS 10.0. EPSS: 12.9% chance of exploitation in the next 30 days. rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
• CVE-1999-0024, published 1997-08-13. Medium severity, CVSS 5.0. EPSS: 5% chance of exploitation in the next 30 days. DNS cache poisoning via BIND, by predictable query IDs.
• CVE-1999-0048, published 1997-01-27. High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days. Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
• CVE-1999-0040, published 1997-05-01. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
• CVE-1999-0078, published 1996-04-18. Low severity, CVSS 1.9. EPSS: 0.9% chance of exploitation in the next 30 days. pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
• CVE-1999-0138, published 1996-06-26. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.