Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-11546 EUVD-2025-38189GHSA-hxh9-cj4v-cqch

CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleS…

Published Nov 7, 2025 · Updated Nov 7, 2025 · Assigned by NEC

Description

CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends specially crafted network packets to the product, arbitrary OS commands may be executed without authentication.

Affected products

VendorProductAffectedFixed
NEC CLUSTERPRO X for Linux (EXPRESSCLUSTER X for Linux) 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 —
NEC CLUSTERPRO X SingleServerSafe for Linux (EXPRESSCLUSTER X SingleServerSafe for Linux) 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 —

References