Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 40 products
| Date | Total | Labels |
|---|
| 2026-03-27 | 1 | Disclosure1 |
| 2026-04-03 | 1 | Disclosure1 |
| 2026-04-04 | 1 | General1 |
| 2026-04-06 | 1 | Disclosure1 |
📶【Atermルータに複数脆弱性】 NEC Atermシリーズに、LAN側からの不正アクセスで任意コマンド実行や装置情報取得につながる複数の脆弱性（CVE-2026-4309 ほか）が公表されました。 対象機種はファーム更新を！ #企業公式相互フォロー
Post summary
NEC Aterm routers have multiple CVE‑2026‑4309 related vulnerabilities disclosed, allowing LAN‑side attackers to execute arbitrary commands and obtain device info; firmware updates are advised.
CVE-2026-4309 Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network. https://www.cve.org/CVERecord?id=CVE-2026-4309
Post summary
The post discloses a missing‑authorization vulnerability (CVE-2026-4309) in NEC Aterm Series where an attacker can retrieve device info and alter settings over the network.
いろいろヤバすぎる "●想定される影響（一例） ・装置固有の情報を取得され、結果として設定を変更される（CVE-2026-4309） ・任意のファイルを上書きされる（CVE-2026-4619） ・任意のOSコマンドを実行される（CVE-2026-4620／CVE-2026-4622） ・telnetサービスを有効化される（CVE-2026-4621）"
Post summary
The post enumerates potential effects for a series of CVE‑2026 vulnerabilities but offers no further detail on exploitation, patches, or PoC.
⚠️ **Vulnerability Alert:** NEC Aterm Series — Multiple Vulnerabilities (CVE-2026-4309, CVE-2026-4619, CVE-2026-4620, CVE-2026-4621, CVE-2026-4622) 📅 **Timeline:** Disclosure: 2026-03-27, Patch: Not Available 🆔 **CVE-2026-4309** | 📊 CVSS: 6.3 (MEDIUM 🟡) | 📈 EPSS: 17.00% 🆔 **CVE-2026-4619** | 📊 CVSS: 6.0 (MEDIUM 🟡) | 📈 EPSS: 17.66% 🆔 **CVE-2026-4620** | 📊 CVSS: 7.1 (HIGH 🟠) | 📈 EPSS: 61.72% 🆔 **CVE-2026-4621** | 📊 CVSS: 6.3 (MEDIUM 🟡) | 📈 EPSS: 18.23% 🆔 **CVE-2026-4622** | 📊 CVSS: 7.1 (HIGH 🟠) | 📈 EPSS: 61.72% 🛠️ **Exploit Maturity:** Not Available 🫨 **Attack Vectors:** - Network (remote) - Some issues require elevated privileges (PR:H) - OS command injection variants may require user interaction (UI:A) 📝 **Summary:** Multiple flaws in NEC Aterm devices allow info disclosure, unauthorized config changes, arbitrary file overwrite, and OS command injection that can lead to remote code execution and full device compromise; some issues can also enable telnet. Root causes are insufficient authorization checks and improper input validation—patches are not yet widely available. 📈 **Impact Scope:** Disclosure of device-specific information; unauthorized configuration changes; arbitrary file overwrite; arbitrary OS command execution leading to remote code execution and full device compromise; enabling telnet service increasing exposure. Affects multiple NEC Aterm models (see vendor advisory for model-specific details). 🛡️ **Recommended Actions:** - Apply vendor-provided patches per model immediately; if unavailable, isolate management interfaces via firewall/VLANs. - Disable remote management and telnet, change default credentials, inventory devices, backup configs, and monitor logs for suspicious activity. 🪢 **Related Resources:** - https://jvn.jp/jp/JVN89339669/ - https://jvndb.jvn.jp/jvndb/JVNDB-2026-000049 🏷 **Tags:** #Cybersecurity #NEC #Aterm
Post summary
NEC Aterm devices have multiple newly disclosed vulnerabilities (CVE-2026-4309 to CVE-2026-4622) that enable information disclosure, command injection, and remote code execution, with no patches yet available but mitigations such as network isolation and disabling remote management are recommended.
40 of 40 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | nec | aterm_w1200ex-ms | - | - | - |
| OS | nec | aterm_w1200ex-ms_firmware | - | - | - |
| HW | nec | aterm_wf1200cr | - | - | - |
| OS | nec | aterm_wf1200cr_firmware | - | - | - |
| HW | nec | aterm_wg1200cr | - | - | - |
| OS | nec | aterm_wg1200cr_firmware | - | - | - |
| HW | nec | aterm_wg1200hp2 | - | - | - |
| OS | nec | aterm_wg1200hp2_firmware | - | - | - |
| HW | nec | aterm_wg1200hp3 | - | - | - |
| OS | nec | aterm_wg1200hp3_firmware | - | - | - |
| HW | nec | aterm_wg1200hp4 | - | - | - |
| OS | nec | aterm_wg1200hp4_firmware | - | - | - |
| HW | nec | aterm_wg1200hs2 | - | - | - |
| OS | nec | aterm_wg1200hs2_firmware | - | - | - |
| HW | nec | aterm_wg1200hs3 | - | - | - |
| OS | nec | aterm_wg1200hs3_firmware | - | - | - |
| HW | nec | aterm_wg1200hs4 | - | - | - |
| OS | nec | aterm_wg1200hs4_firmware | - | - | - |
| HW | nec | aterm_wg1800hp3 | - | - | - |
| OS | nec | aterm_wg1800hp3_firmware | - | - | - |
| HW | nec | aterm_wg1800hp4 | - | - | - |
| OS | nec | aterm_wg1800hp4_firmware | - | - | - |
| HW | nec | aterm_wg1900hp | - | - | - |
| HW | nec | aterm_wg1900hp2 | - | - | - |
| OS | nec | aterm_wg1900hp2_firmware | - | - | - |
| OS | nec | aterm_wg1900hp_firmware | - | - | - |
| HW | nec | aterm_wg2600hm4 | - | - | - |
| OS | nec | aterm_wg2600hm4_firmware | - | - | - |
| HW | nec | aterm_wg2600hp4 | - | - | - |
| OS | nec | aterm_wg2600hp4_firmware | - | - | - |
| HW | nec | aterm_wg2600hs | - | - | - |
| HW | nec | aterm_wg2600hs2 | - | - | - |
| OS | nec | aterm_wg2600hs2_firmware | - | - | - |
| OS | nec | aterm_wg2600hs_firmware | - | - | - |
| HW | nec | aterm_wx1500hp | - | - | - |
| OS | nec | aterm_wx1500hp_firmware | - | - | - |
| HW | nec | aterm_wx3000hp | - | - | - |
| OS | nec | aterm_wx3000hp_firmware | - | - | - |
| HW | nec | aterm_wx3600hp | - | - | - |
| OS | nec | aterm_wx3600hp_firmware | - | - | - |