7.1Yüksek
CVE-2026-4622
Açıklama
OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
Zayıflık türü (CWE):
CWE-78
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| nec | aterm gb1200pe firmware | < 1.3.1 | |
| nec | aterm wf1200cr firmware | < 1.6.0 | |
| nec | aterm wg1200cr firmware | < 1.5.0 | |
| nec | aterm wg2600hm4 firmware | < 1.4.2 | |
| nec | aterm wg2600hp4 firmware | < 1.4.2 | |
| nec | aterm wg2600hs firmware | < 1.7.2 | |
| nec | aterm wg2600hs2 firmware | < 1.3.2 | |
| nec | aterm wx3000hp firmware | < 2.5.0 | |
| nec | aterm wx3000hp2 firmware | < 1.3.2 | |
| NEC Platforms, Ltd. | Aterm GB1200PE | Before Ver. 1.3.1 | |
| NEC Platforms, Ltd. | Aterm WF1200CR | Before Ver. 1.6.0 | |
| NEC Platforms, Ltd. | Aterm WG1200CR | Before Ver. 1.5.0 | |
| NEC Platforms, Ltd. | Aterm WG2600HM4 | Before Ver. 1.4.2 | |
| NEC Platforms, Ltd. | Aterm WG2600HP4 | Before Ver. 1.4.2 | |
| NEC Platforms, Ltd. | Aterm WG2600HS | Before Ver. 1.7.2 | |
| NEC Platforms, Ltd. | Aterm WG2600HS2 | Before Ver. 1.3.2 | |
| NEC Platforms, Ltd. | Aterm WX3000HP | Before Ver. 2.5.0 | |
| NEC Platforms, Ltd. | Aterm WX3000HP2 | Before Ver. 1.3.2 |
Kaynaklar ve yamalar
- https://jpn.nec.com/security-info/secinfo/nv26-001_en.html Vendor Advisory
CPE eşleşmeleri (NVD) (9)
cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*< 1.7.2cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*< 1.6.0cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*< 1.5.0cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:*< 1.4.2cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:*< 1.4.2cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:*< 1.3.2cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:*< 2.5.0cpe:2.3:o:nec:aterm_wx3000hp2_firmware:*:*:*:*:*:*:*:*< 1.3.2cpe:2.3:o:nec:aterm_gb1200pe_firmware:*:*:*:*:*:*:*:*< 1.3.1