Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 42 products
| Date | Total | Labels |
|---|
| 2026-03-27 | 1 | Disclosure1 |
| 2026-04-03 | 1 | Disclosure1 |
| 2026-04-04 | 1 | General1 |
| 2026-04-08 | 1 | General1 |
CVE-2026-4621 Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network. https://www.cve.org/CVERecord?id=CVE-2026-4621
Post summary
The post announces CVE-2026-4621 as a hidden functionality flaw in NEC Aterm Series that lets attackers enable telnet, but offers no evidence of exploitation, PoC, or patch details.
秘密のバックドアを仕込むのは、中共だけの習性ではないのだ。 >セキュリティ上問題のある隠し機能（CVE-2026-4621）
Post summary
The message merely references CVE-2026-4621 without additional technical detail, exploit information, or mitigation advice.
いろいろヤバすぎる "●想定される影響（一例） ・装置固有の情報を取得され、結果として設定を変更される（CVE-2026-4309） ・任意のファイルを上書きされる（CVE-2026-4619） ・任意のOSコマンドを実行される（CVE-2026-4620／CVE-2026-4622） ・telnetサービスを有効化される（CVE-2026-4621）"
Post summary
The post enumerates potential impacts for several CVEs without providing PoC, exploit details, patch information, or evidence of active exploitation.
⚠️ **Vulnerability Alert:** NEC Aterm Series — Multiple Vulnerabilities (CVE-2026-4309, CVE-2026-4619, CVE-2026-4620, CVE-2026-4621, CVE-2026-4622) 📅 **Timeline:** Disclosure: 2026-03-27, Patch: Not Available 🆔 **CVE-2026-4309** | 📊 CVSS: 6.3 (MEDIUM 🟡) | 📈 EPSS: 17.00% 🆔 **CVE-2026-4619** | 📊 CVSS: 6.0 (MEDIUM 🟡) | 📈 EPSS: 17.66% 🆔 **CVE-2026-4620** | 📊 CVSS: 7.1 (HIGH 🟠) | 📈 EPSS: 61.72% 🆔 **CVE-2026-4621** | 📊 CVSS: 6.3 (MEDIUM 🟡) | 📈 EPSS: 18.23% 🆔 **CVE-2026-4622** | 📊 CVSS: 7.1 (HIGH 🟠) | 📈 EPSS: 61.72% 🛠️ **Exploit Maturity:** Not Available 🫨 **Attack Vectors:** - Network (remote) - Some issues require elevated privileges (PR:H) - OS command injection variants may require user interaction (UI:A) 📝 **Summary:** Multiple flaws in NEC Aterm devices allow info disclosure, unauthorized config changes, arbitrary file overwrite, and OS command injection that can lead to remote code execution and full device compromise; some issues can also enable telnet. Root causes are insufficient authorization checks and improper input validation—patches are not yet widely available. 📈 **Impact Scope:** Disclosure of device-specific information; unauthorized configuration changes; arbitrary file overwrite; arbitrary OS command execution leading to remote code execution and full device compromise; enabling telnet service increasing exposure. Affects multiple NEC Aterm models (see vendor advisory for model-specific details). 🛡️ **Recommended Actions:** - Apply vendor-provided patches per model immediately; if unavailable, isolate management interfaces via firewall/VLANs. - Disable remote management and telnet, change default credentials, inventory devices, backup configs, and monitor logs for suspicious activity. 🪢 **Related Resources:** - https://jvn.jp/jp/JVN89339669/ - https://jvndb.jvn.jp/jvndb/JVNDB-2026-000049 🏷 **Tags:** #Cybersecurity #NEC #Aterm
Post summary
NEC Aterm devices are affected by five CVEs enabling information disclosure, file overwrite, and remote code execution; no patch is available yet, so the recommended mitigations include disabling remote management, isolating interfaces, and enforcing credential changes.
42 of 42 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | nec | aterm_w1200ex-ms | - | - | - |
| OS | nec | aterm_w1200ex-ms_firmware | - | - | - |
| HW | nec | aterm_wf1200cr | - | - | - |
| OS | nec | aterm_wf1200cr_firmware | - | - | - |
| HW | nec | aterm_wg1200cr | - | - | - |
| OS | nec | aterm_wg1200cr_firmware | - | - | - |
| HW | nec | aterm_wg1200hp2 | - | - | - |
| OS | nec | aterm_wg1200hp2_firmware | - | - | - |
| HW | nec | aterm_wg1200hp3 | - | - | - |
| OS | nec | aterm_wg1200hp3_firmware | - | - | - |
| HW | nec | aterm_wg1200hp4 | - | - | - |
| OS | nec | aterm_wg1200hp4_firmware | - | - | - |
| HW | nec | aterm_wg1200hs2 | - | - | - |
| OS | nec | aterm_wg1200hs2_firmware | - | - | - |
| HW | nec | aterm_wg1200hs3 | - | - | - |
| OS | nec | aterm_wg1200hs3_firmware | - | - | - |
| HW | nec | aterm_wg1200hs4 | - | - | - |
| OS | nec | aterm_wg1200hs4_firmware | - | - | - |
| HW | nec | aterm_wg1800hp3 | - | - | - |
| OS | nec | aterm_wg1800hp3_firmware | - | - | - |
| HW | nec | aterm_wg1800hp4 | - | - | - |
| OS | nec | aterm_wg1800hp4_firmware | - | - | - |
| HW | nec | aterm_wg1900hp | - | - | - |
| HW | nec | aterm_wg1900hp2 | - | - | - |
| OS | nec | aterm_wg1900hp2_firmware | - | - | - |
| OS | nec | aterm_wg1900hp_firmware | - | - | - |
| HW | nec | aterm_wg2600hm4 | - | - | - |
| OS | nec | aterm_wg2600hm4_firmware | - | - | - |
| HW | nec | aterm_wg2600hp4 | - | - | - |
| OS | nec | aterm_wg2600hp4_firmware | - | - | - |
| HW | nec | aterm_wg2600hs | - | - | - |
| HW | nec | aterm_wg2600hs2 | - | - | - |
| OS | nec | aterm_wg2600hs2_firmware | - | - | - |
| OS | nec | aterm_wg2600hs_firmware | - | - | - |
| HW | nec | aterm_wx1500hp | - | - | - |
| OS | nec | aterm_wx1500hp_firmware | - | - | - |
| HW | nec | aterm_wx3000hp | - | - | - |
| HW | nec | aterm_wx3000hp2 | - | - | - |
| OS | nec | aterm_wx3000hp2_firmware | - | - | - |
| OS | nec | aterm_wx3000hp_firmware | - | - | - |
| HW | nec | aterm_wx3600hp | - | - | - |
| OS | nec | aterm_wx3600hp_firmware | - | - | - |