Approved changes feed: RSS · Atom

cpe:2.3:h:harmonicinc:nsg_9000:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorHarmonicinc (c172c615-d4b3-565c-a730-f241eceda1c6)
ProductNsg 9000 (b0d0ba1a-b978-53fc-86f5-3b27519ebcbe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14943 not_vulnerable 2026-06-08 05:10:53.701445 Details available
Harmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default password of nsgguest for the guest account, and a default password of nsgconfig for the config account.
Published: 2018-08-05T18:00:00.000Z
Updated: 2024-08-05T09:46:24.693Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14942 not_vulnerable 2026-06-08 05:10:53.701057 Details available
Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATION_GET_FILE" or "POST /PY/EMULATION_EXPORT" with FileName=../../../passwd in the POST data.
Published: 2018-08-05T18:00:00.000Z
Updated: 2024-08-05T09:46:24.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14941 vulnerable 2026-06-08 05:10:53.699726 Details available
Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via a direct request for the /webapp.py URI.
Published: 2018-08-05T18:00:00.000Z
Updated: 2024-08-05T09:46:24.930Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.