critical9.8
CVE-2026-4620
OS Command Injection vulnerability in NEC Platforms, Ltd.
Impact
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nec | Aterm Wx3600hp Firmware | before 1.5.3 |
| Nec | Aterm Wx1500hp Firmware | before 1.4.2 |