Univerge Ix R Ix V
Monthly
Authentication bypass in the WebGUI of NEC's UNIVERGE IX-R/IX-V series network routers allows remote attackers to tamper with WebGUI messages and execute arbitrary CLI commands on the device without valid credentials. Because the affected management interface can be reached over the internet, an unauthenticated attacker can gain administrative-level command execution, effectively compromising the router's configuration and traffic-handling. No public exploit has been identified at time of analysis, but the CVSS 4.0 base score of 9.3 reflects the low complexity and high impact.
Authentication bypass in the WebGUI of NEC's UNIVERGE IX-R/IX-V series network routers allows remote attackers to tamper with WebGUI messages and execute arbitrary CLI commands on the device without valid credentials. Because the affected management interface can be reached over the internet, an unauthenticated attacker can gain administrative-level command execution, effectively compromising the router's configuration and traffic-handling. No public exploit has been identified at time of analysis, but the CVSS 4.0 base score of 9.3 reflects the low complexity and high impact.