medium6.5
CVE-2026-4309
Missing Authorization vulnerability in NEC Platforms, Ltd.
Impact
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nec | Aterm Wg2600hs Firmware | before 1.7.2 |
| Nec | Aterm Wf1200cr Firmware | before 1.6.0 |
| Nec | Aterm Wg1200cr Firmware | before 1.5.0 |
| Nec | Aterm Wg2600hp4 Firmware | before 1.4.2 |
| Nec | Aterm Wg2600hm4 Firmware | before 1.4.2 |
| Nec | Aterm Wg2600hs2 Firmware | before 1.3.2 |
| Nec | Aterm Wx3000hp Firmware | before 2.5.0 |
| Nec | Aterm Wx3600hp Firmware | through 1.5.3 |
| Nec | Aterm W1200ex-Ms Firmware | All versions |
| Nec | Aterm Wg1200hp2 Firmware | All versions |
| Nec | Aterm Wg1900hp Firmware | All versions |
| Nec | Aterm Wg1200hs2 Firmware | All versions |