CVE-2026-4309

CVE-2026-4309

CVSS 6.3 MEDIUMEPSS 0.1%CWE-862

Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected products

NEC Platforms, Ltd. · Aterm GB1200PE NEC Platforms, Ltd. · Aterm GX1200HP NEC Platforms, Ltd. · Aterm GX1200HS4 NEC Platforms, Ltd. · Aterm W1200EX(-MS)NEC Platforms, Ltd. · Aterm WF1200CR NEC Platforms, Ltd. · Aterm WG1200CR NEC Platforms, Ltd. · Aterm WG1200DM4 NEC Platforms, Ltd. · Aterm WG1200HP2 NEC Platforms, Ltd. · Aterm WG1200HP3 NEC Platforms, Ltd. · Aterm WG1200HP4 NEC Platforms, Ltd. · Aterm WG1200HS2 NEC Platforms, Ltd. · Aterm WG1200HS3 NEC Platforms, Ltd. · Aterm WG1200HS4 NEC Platforms, Ltd. · Aterm WG1800HP3 NEC Platforms, Ltd. · Aterm WG1800HP4 NEC Platforms, Ltd. · Aterm WG1900HP NEC Platforms, Ltd. · Aterm WG1900HP2 NEC Platforms, Ltd. · Aterm WG2600HM4 NEC Platforms, Ltd. · Aterm WG2600HP4 NEC Platforms, Ltd. · Aterm WG2600HS NEC Platforms, Ltd. · Aterm WG2600HS2 NEC Platforms, Ltd. · Aterm WX1500HP NEC Platforms, Ltd. · Aterm WX3000HP NEC Platforms, Ltd. · Aterm WX3600HP

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://jpn.nec.com/security-info/secinfo/nv26-001_en.html