CVE-2026-4621

MEDIUM EPSS 5.3%
Published Mar 27, 20263mo ago · Modified Jun 17, 20262w ago
6.3 CVSS 4.0
Medium
Find Similar
Published Mar 27, 2026 3mo ago
Last Modified Jun 17, 2026 2w ago

Description

Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.

CVSS Details

Base Score
6.3
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
5.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-912

Affected Products 42

VendorProductVersionRange
necaterm_wg1200hp4_firmware*any
necaterm_wg1200hp4*any
necaterm_wg2600hs_firmware* <1.7.2
necaterm_wg2600hs*any
necaterm_wf1200cr_firmware* <1.6.0
necaterm_wf1200cr*any
necaterm_wg1200cr_firmware* <1.5.0
necaterm_wg1200cr*any
necaterm_wg2600hp4_firmware* <1.4.2
necaterm_wg2600hp4*any
necaterm_wg2600hm4_firmware* <1.4.2
necaterm_wg2600hm4*any
necaterm_wg2600hs2_firmware* <1.3.2
necaterm_wg2600hs2*any
necaterm_wx3000hp_firmware* <2.5.0
necaterm_wx3000hp*any
necaterm_wx3600hp_firmware* ≤1.5.3
necaterm_wx3600hp*any
necaterm_w1200ex-ms_firmware*any
necaterm_w1200ex-ms*any
necaterm_wg1200hp2_firmware*any
necaterm_wg1200hp2*any
necaterm_wg1900hp_firmware*any
necaterm_wg1900hp*any
necaterm_wg1200hs2_firmware*any
necaterm_wg1200hs2*any
necaterm_wg1800hp3_firmware*any
necaterm_wg1800hp3*any
necaterm_wg1200hp3_firmware*any
necaterm_wg1200hp3*any
necaterm_wg1900hp2_firmware*any
necaterm_wg1900hp2*any
necaterm_wg1200hs3_firmware*any
necaterm_wg1200hs3*any
necaterm_wg1800hp4_firmware*any
necaterm_wg1800hp4*any
necaterm_wg1200hs4_firmware*any
necaterm_wg1200hs4*any
necaterm_wx1500hp_firmware* <1.4.2
necaterm_wx1500hp*any
necaterm_wx3000hp2_firmware* <1.3.2
necaterm_wx3000hp2*any

References 1

  • jpn.nec.com https://jpn.nec.com/security-info/secinfo/nv26-001_en.html
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.