6.3Mittel
CVE-2026-4309
Beschreibung
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Schwachstellentyp (CWE):
CWE-862
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://jpn.nec.com/security-info/secinfo/nv26-001_en.html Vendor Advisory
CPE-Treffer (NVD) (20)
cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*< 1.7.2cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*< 1.6.0cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*< 1.5.0cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:*< 1.4.2cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:*< 1.4.2cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:*< 1.3.2cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:*< 2.5.0cpe:2.3:o:nec:aterm_wx3600hp_firmware:*:*:*:*:*:*:*:*≤ 1.5.3cpe:2.3:o:nec:aterm_w1200ex-ms_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1900hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1800hp3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1900hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1800hp4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wx1500hp_firmware:*:*:*:*:*:*:*:*< 1.4.2