6.3Orta
CVE-2026-4309
Açıklama
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Zayıflık türü (CWE):
CWE-862
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://jpn.nec.com/security-info/secinfo/nv26-001_en.html Vendor Advisory
CPE eşleşmeleri (NVD) (20)
cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*< 1.7.2cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*< 1.6.0cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*< 1.5.0cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:*< 1.4.2cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:*< 1.4.2cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:*< 1.3.2cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:*< 2.5.0cpe:2.3:o:nec:aterm_wx3600hp_firmware:*:*:*:*:*:*:*:*≤ 1.5.3cpe:2.3:o:nec:aterm_w1200ex-ms_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1900hp_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1800hp3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1900hp2_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs3_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1800hp4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hp4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wg1200hs4_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:nec:aterm_wx1500hp_firmware:*:*:*:*:*:*:*:*< 1.4.2