NS
Product
NEXUS Series
58
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 18High 22Medium 18Low 0
Watch
Add NEXUS Series to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-51555 | 10.0 | Dec 5 | Force Change of Default Credentials Affected: through 3.07.02 |
| CVE-2024-51551 | 10.0 | Dec 5 | Default Credentials Affected: through 3.07.02 |
| CVE-2024-11317 | 10.0 | Dec 5 | PHP Session Fixation Affected: through 3.08.02 |
| CVE-2024-6784 | 9.9 | Dec 5 | SSRF Server Side Request Forgery Affected: through 3.08.02 |
| CVE-2024-51547 | 9.8 | Feb 6 | Credentials Disclosure - keys Affected: through 3.* |
| CVE-2024-51554 | 9.8 | Dec 5 | off-by-one-error Affected: through 3.08.02 |
| CVE-2024-51550 | 9.8 | Dec 5 | Data Validation / Sanitization Affected: through 3.08.02 |
| CVE-2024-51545 | 9.8 | Dec 5 | Username Enumeration Affected: through 3.08.02 |
| CVE-2024-48845 | 9.8 | Dec 5 | Weak Password Rules/Strength Affected: through 3.07.02 |
| CVE-2024-48840 | 9.8 | Dec 5 | Unauthorized Access Affected: through 3.08.02 |
| CVE-2024-48839 | 9.8 | Dec 5 | Remote Code Execution, RCE Affected: through 3.08.02 |
| CVE-2024-6298 | 9.8 | Jul 5 | remote code execution Affected: through 3.08.01 |
| CVE-2024-51549 | 9.4 | Dec 5 | Absolute Path Traversal Affected: through 3.08.02 |
| CVE-2025-2409 | 9.1 | May 22 | Admin Authorized System File corruption Affected: through 3.08.03 |
| CVE-2025-2410 | 9.1 | May 22 | Admin Authorized Port (iptables) manipulation (open/close/disable ports) Affected: through 3.08.03 |
| CVE-2024-48847 | 9.1 | Dec 5 | MD5 bypass operation Affected: through 3.08.01 |
| CVE-2025-30171 | 9.0 | May 22 | Admin Authorized System File Deletion Affected: through 3.08.03 |
| CVE-2024-48853 | 9.0 | May 22 | Authenticated Escalation to guest to root Affected: through 3.08.03 |
| CVE-2024-13955 | 8.8 | May 22 | SQL Injection 2nd Order Affected: through 3.* |
| CVE-2024-51548 | 8.8 | Dec 5 | Dangerous File Upload Affected: through 3.08.02 |
| CVE-2024-13952 | 8.4 | May 22 | Remote Code Execution Affected: through 3.* |
| CVE-2024-51544 | 8.2 | Dec 5 | Service Control Affected: through 3.08.02 |
| CVE-2024-51542 | 8.2 | Dec 5 | Configuration Download Affected: through 3.08.02 |
| CVE-2024-6515 | 8.1 | Dec 5 | unauthorized file access Affected: through 3.08.02 |
| CVE-2025-30172 | 8.0 | May 22 | Admin Authorized Remote Code Execution Affected: through 3.08.03 |
| CVE-2024-9639 | 8.0 | May 22 | Authenticated Remote Code Execution Affected: through 3.08.03 |
| CVE-2024-13957 | 7.6 | May 22 | SSRF Server Side Request Forgery Affected: through 3.* |
| CVE-2024-13951 | 7.6 | May 22 | One way hash with predictable salt Affected: through 3.* |
| CVE-2024-51546 | 7.5 | Dec 5 | Credentails Disclosure Affected: through 3.08.02 |
| CVE-2024-51543 | 7.5 | Dec 5 | Information Disclosure Affected: through 3.08.02 |
| CVE-2024-51541 | 7.5 | Dec 5 | Local File Inclusion Affected: through 3.08.02 |
| CVE-2024-48843 | 7.5 | Dec 5 | Denial of Service, DoS Affected: through 3.08.02 |
| CVE-2024-11316 | 7.5 | Dec 5 | Filesize Check Affected: through 3.08.02 |
| CVE-2024-6209 | 7.5 | Jul 5 | unauthorized file access Affected: through 3.08.01 |
| CVE-2024-13948 | 7.3 | May 22 | Insecure Permissions Affected: through 3.* |
| CVE-2024-48846 | 7.3 | Dec 5 | Cross Side Request Forgery, CSRF Affected: through 3.08.02 |
| CVE-2024-13931 | 7.2 | May 22 | Authenticated Relative Path Traversal Affected: through 3.08.03 |
| CVE-2024-13929 | 7.2 | May 22 | Authenticated Servlet Command Injection Affected: through 3.08.03 |
| CVE-2024-13928 | 7.2 | May 22 | Authenticated SQL Injection Affected: through 3.08.03 |
| CVE-2024-48850 | 7.2 | May 22 | Authenticated Absolute Path Traversal Affected: through 3.08.03 |
| CVE-2024-13950 | 6.8 | May 22 | Log Injection Affected: through 3.* |
| CVE-2024-13949 | 6.8 | May 22 | Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3 Affected: through 3.* |
| CVE-2024-13946 | 6.8 | May 22 | Binary Planting / LoadLibrary DLL's not Signed Affected: through 3.* |
| CVE-2024-13956 | 6.7 | May 22 | SSL Verification Bypass Affected: through 3.* |
| CVE-2025-30169 | 6.7 | May 22 | Admin Authorized File Upload and Execute PHP Affected: through 3.08.03 |
| CVE-2025-30173 | 6.7 | May 22 | Admin Authorized File Upload Affected: through 3.08.03 |
| CVE-2024-13954 | 6.5 | May 22 | Serialization / Deserialization of configuration data Affected: through 3.* |
| CVE-2024-51553 | 6.5 | May 22 | Predictable Filename Affected: through 3.* |
| CVE-2024-48848 | 6.5 | May 22 | LARGECONTENT - device disk overutilization Affected: through 3.* |
| CVE-2024-48844 | 6.5 | Dec 5 | Denial of Service, DoS Affected: initial through 3.08.02 |