CVE-2022-34824 — NEC Corporation / CLUSTERPRO X

Description (CNA)

Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
NEC Corporation / CLUSTERPRO X	affected CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier

CWE

No CWE identifiers supplied.

References

https://jpn.nec.com/security-info/secinfo/nv22-014_en.html

ADP enrichment

CVE

No English description supplied.

https://jpn.nec.com/security-info/secinfo/nv22-014_en.html

CISA-ADP

No English description supplied.

No references supplied.