Nexacro
Vendor:
First CVE: May 6, 2020 · Active for 6 years
6
Total CVEs
More Total CVEs than 83% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
9.1
Avg CVSS
Higher Avg CVSS than 84% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Nexacro over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 6, 2020
6 years ago
Most Recent CVE
Apr 19, 2022
1,561 days ago
CVE Severity & Scoring
Nexacro6 CVEs
50%
50%
All CVEs353,240 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network6 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (66.7%)
Unknown0 (0.0%)
Required2 (33.3%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None6 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-26607CRITICAL An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems. | Oct 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2019-19167CRITICAL Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause | May 6, 2020 | 9.8 | 30 | NO | NO |
CVE-2021-26612CRITICAL An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command aft | Nov 30, 2021 | 9.8 | 29 | NO | NO |
CVE-2021-26625HIGH Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerability is caused by an automatic update funct | Apr 19, 2022 | 8.8 | 27 | NO | NO |
CVE-2020-7874HIGH Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and executi | Sep 9, 2021 | 8.8 | 27 | NO | NO |
CVE-2021-26613HIGH improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method. | Feb 9, 2022 | 7.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Nexacro
Top CWEs
Versions
No cataloged versions.