CVE-2020-5633

CRITICAL

9.8

CVSS Score

Published: January 13, 2021 at 09:40 AM UTC

Updated: June 17, 2026 at 03:21 AM UTC

7 products affected across 1 vendorBaseboard Management ControllerExpress5800/T110J-SExpress5800/T110J (2Nd-Gen)

Using Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied by NEC Corporation?

Get instant alerts when new vulnerabilities affect Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 3%

Description

Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Baseboard Management Controller · NEC

95%

v ≤ 1.09Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j

nec-express5800-gt110j (environment) · nec-express5800-t110j (environment) · nec-express5800-t110j-2nd-gen (environment) · nec-express5800-t110j-s (environment) · nec-express5800-t110j-s-2nd-gen (environment) · nec-istorage-ns100ti (environment)

Express5800/Gt110J · NECdevice

80%

All versions

Express5800/T110J · NECdevice

80%

All versions

Express5800/T110J (2Nd-Gen)· NECdevice

80%

All versions

Express5800/T110J-S · NECdevice

80%

All versions