CVE-2025-11546_CVE-2025-11546

9.3 / 10

CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends specially crafted network packets to the product, arbitrary OS commands may be executed without authentication.

AI Analysis

Arbitrary OS commands may be executed without authentication by sending specially crafted network packets to the product.

Basic Information

ID CVE-2025-11546

Source NEC

Published Nov 7, 2025 at 01:09

Modified Nov 7, 2025 at 04:04

Affected Product

Vendor NEC Corporation

Product CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux)

Version 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2

Affected Versions NEC Corporation CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux) 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2
NEC Corporation CLUSTERPRO X SingleServerSafe for Linux (EXPRESSCLUSTER X SingleServerSafe for Linux) 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2

CWE Classification

CWE-78

AI Assessment

AI Score 9.3 / 10

AI Severity Critical

Vendor NEC Corporation

Product CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux), CLUSTERPRO X SingleServerSafe for Linux (EXPRESSCLUSTER X SingleServerSafe for Linux)

Version 4.0, 4.1, 4.2, 5.0, 5.1, 5.2

References

jpn.nec.com /security-info/secinfo/nv25-006_en.html

{
    "lastseen": "",
    "description": "CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends specially crafted network packets to the product, arbitrary OS commands may be executed without authentication.",
    "published": "2025-11-07T01:09:08.662Z",
    "modified": "2025-11-07T04:04:50.054Z",
    "type": "cve",
    "title": "CVE-2025-11546",
    "source": "NEC",
    "references": "https://jpn.nec.com/security-info/secinfo/nv25-006_en.html",
    "id": "CVE-2025-11546",
    "bulletinFamily": "",
    "cwe": [
        "CWE-78"
    ],
    "cvelist": null,
    "sourceData": "NEC Corporation CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux) 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2\nNEC Corporation CLUSTERPRO X SingleServerSafe for Linux (EXPRESSCLUSTER X SingleServerSafe for Linux) 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2",
    "sourceHref": "",
    "cvss": {
        "score": 9.3,
        "severity": "CRITICAL",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux)",
    "version": "4.0, 4.1, 4.2, 5.0, 5.1 and 5.2",
    "vendor": "NEC Corporation",
    "ai_description": "Arbitrary OS commands may be executed without authentication by sending specially crafted network packets to the product.",
    "ai_severity": "Critical",
    "ai_vendor": "NEC Corporation",
    "ai_product": "CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux), CLUSTERPRO X SingleServerSafe for Linux (EXPRESSCLUSTER X SingleServerSafe for Linux)",
    "ai_version": "4.0, 4.1, 4.2, 5.0, 5.1, 5.2",
    "ai_score": 9.3
}