CVE-2018-11741

PoC ×4—

CVSS 3.1

9.8 critical

EPSS

18%p97

Published

Dec 26, 2018 (Dec 26, 2018)

Modified

Jun 17, 2026

Description

NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs.

Vendors: nec
Products: univerge sv9100 webpro firmware
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (17.9%)

In the news0 stories

No ingested article mentions this CVE yet.