OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://jpn.nec.com/security-info/secinfo/nv26-001_en.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.1 · necNVD modified 2026-10-26 21:10
Affected (CPE criteria) 9
cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wx3000hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_gb1200pe_firmware:*:*:*:*:*:*:*:*
References 1
- https://jpn.nec.com/security-info/secinfo/nv26-001_en.html Vendor Advisory