Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://jpn.nec.com/security-info/secinfo/nv26-001_en.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.3 · necNVD modified 2026-10-26 21:10
Affected (CPE criteria) 20
cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wx3600hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_w1200ex-ms_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1900hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1800hp3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1900hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1800hp4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wx1500hp_firmware:*:*:*:*:*:*:*:*
References 1
- https://jpn.nec.com/security-info/secinfo/nv26-001_en.html Vendor Advisory