Nec Corporation
Monthly
Remote, unauthenticated command execution as SYSTEM is possible against NEC WebSAM WinShare on Windows - versions 7.2.0 through 7.5.0, 7.6.0, and 7.7.0 through 7.7.2 - because the product's network communication processing fails to properly validate input. An attacker who can reach the WinShare listening port needs only to send a crafted network packet; the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) confirms no credentials, no user interaction, and no special preconditions beyond network reachability, yielding full compromise of confidentiality, integrity and availability. vuln.today's priority decision is act_now, reflecting a genuine top-priority case rather than a high-score/low-risk artifact; no CISA KEV entry or public exploit code is identified in the available sources, and the practical risk is dominated by whether the service port is exposed to untrusted networks.
Remote, unauthenticated command execution as SYSTEM is possible against NEC WebSAM WinShare on Windows - versions 7.2.0 through 7.5.0, 7.6.0, and 7.7.0 through 7.7.2 - because the product's network communication processing fails to properly validate input. An attacker who can reach the WinShare listening port needs only to send a crafted network packet; the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) confirms no credentials, no user interaction, and no special preconditions beyond network reachability, yielding full compromise of confidentiality, integrity and availability. vuln.today's priority decision is act_now, reflecting a genuine top-priority case rather than a high-score/low-risk artifact; no CISA KEV entry or public exploit code is identified in the available sources, and the practical risk is dominated by whether the service port is exposed to untrusted networks.