critical9.8
CVE-2026-4622
OS Command Injection vulnerability in NEC Platforms, Ltd.
Impact
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nec | Aterm Wg2600hs Firmware | before 1.7.2 |
| Nec | Aterm Wf1200cr Firmware | before 1.6.0 |
| Nec | Aterm Wg1200cr Firmware | before 1.5.0 |
| Nec | Aterm Wg2600hp4 Firmware | before 1.4.2 |
| Nec | Aterm Wg2600hm4 Firmware | before 1.4.2 |
| Nec | Aterm Wg2600hs2 Firmware | before 1.3.2 |
| Nec | Aterm Wx3000hp Firmware | before 2.5.0 |
| Nec | Aterm Wx3000hp2 Firmware | before 1.3.2 |
| Nec | Aterm Gb1200pe Firmware | before 1.3.1 |