7.1Alta

CVE-2026-4622

NEC Platforms, Ltd. Aterm WG2600HS; NEC Platforms, Ltd. Aterm WF1200CR; NEC Platforms, Ltd. Aterm WG1200CR; NEC Platforms, Ltd. Aterm WG2600HP4 Publicada: (hace 7 meses)

Descripción

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Debilidad (CWE): CWE-78

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
nec aterm gb1200pe firmware < 1.3.1
nec aterm wf1200cr firmware < 1.6.0
nec aterm wg1200cr firmware < 1.5.0
nec aterm wg2600hm4 firmware < 1.4.2
nec aterm wg2600hp4 firmware < 1.4.2
nec aterm wg2600hs firmware < 1.7.2
nec aterm wg2600hs2 firmware < 1.3.2
nec aterm wx3000hp firmware < 2.5.0
nec aterm wx3000hp2 firmware < 1.3.2
NEC Platforms, Ltd. Aterm GB1200PE Before Ver. 1.3.1
NEC Platforms, Ltd. Aterm WF1200CR Before Ver. 1.6.0
NEC Platforms, Ltd. Aterm WG1200CR Before Ver. 1.5.0
NEC Platforms, Ltd. Aterm WG2600HM4 Before Ver. 1.4.2
NEC Platforms, Ltd. Aterm WG2600HP4 Before Ver. 1.4.2
NEC Platforms, Ltd. Aterm WG2600HS Before Ver. 1.7.2
NEC Platforms, Ltd. Aterm WG2600HS2 Before Ver. 1.3.2
NEC Platforms, Ltd. Aterm WX3000HP Before Ver. 2.5.0
NEC Platforms, Ltd. Aterm WX3000HP2 Before Ver. 1.3.2

Referencias y parches

Coincidencias CPE (NVD) (9)

  • cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:* < 1.7.2
  • cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:* < 1.6.0
  • cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:* < 1.5.0
  • cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:* < 1.4.2
  • cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:* < 1.4.2
  • cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:* < 1.3.2
  • cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:* < 2.5.0
  • cpe:2.3:o:nec:aterm_wx3000hp2_firmware:*:*:*:*:*:*:*:* < 1.3.2
  • cpe:2.3:o:nec:aterm_gb1200pe_firmware:*:*:*:*:*:*:*:* < 1.3.1