CVE-2026-4309

Missing Authorization Enables Unauthorized Retrieval and Modification on NEC Aterm Routers

Published Mar 27, 2026 CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Description
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Nec aterm W1200ex-ms
Nec aterm W1200ex-ms Firmware
Nec aterm Wf1200cr Firmware
Nec aterm Wg1200cr Firmware
Nec aterm Wg1200hp2 Firmware
Nec aterm Wg1200hp3 Firmware
Nec aterm Wg1200hp4 Firmware
Nec aterm Wg1200hs2 Firmware
Nec aterm Wg1200hs3 Firmware
Nec aterm Wg1200hs4 Firmware
Nec aterm Wg1800hp3 Firmware
Nec aterm Wg1800hp4 Firmware
Nec aterm Wg1900hp2 Firmware
Nec aterm Wg1900hp Firmware
Nec aterm Wg2600hm4 Firmware
Nec aterm Wg2600hp4 Firmware
Nec aterm Wg2600hs2 Firmware
Nec aterm Wg2600hs Firmware
Nec aterm Wx1500hp Firmware
Nec aterm Wx3000hp Firmware
Nec aterm Wx3600hp Firmware
CPEs cpe:2.3:h:nec:aterm_w1200ex-ms:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wf1200cr:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1200cr:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1200hp2:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1200hp3:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1200hp4:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1200hs2:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1200hs3:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1200hs4:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1800hp3:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1800hp4:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1900hp2:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg1900hp:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg2600hm4:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg2600hp4:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg2600hs2:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wg2600hs:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wx1500hp:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wx3000hp:-:*:*:*:*:*:*:*
cpe:2.3:h:nec:aterm_wx3600hp:-:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_w1200ex-ms_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1200hp2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1200hp3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1200hp4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1200hs2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1200hs3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1200hs4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1800hp3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1800hp4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1900hp2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg1900hp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wx1500hp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:nec:aterm_wx3600hp_firmware:*:*:*:*:*:*:*:*
Vendors & Products Nec aterm W1200ex-ms
Nec aterm W1200ex-ms Firmware
Nec aterm Wf1200cr Firmware
Nec aterm Wg1200cr Firmware
Nec aterm Wg1200hp2 Firmware
Nec aterm Wg1200hp3 Firmware
Nec aterm Wg1200hp4 Firmware
Nec aterm Wg1200hs2 Firmware
Nec aterm Wg1200hs3 Firmware
Nec aterm Wg1200hs4 Firmware
Nec aterm Wg1800hp3 Firmware
Nec aterm Wg1800hp4 Firmware
Nec aterm Wg1900hp2 Firmware
Nec aterm Wg1900hp Firmware
Nec aterm Wg2600hm4 Firmware
Nec aterm Wg2600hp4 Firmware
Nec aterm Wg2600hs2 Firmware
Nec aterm Wg2600hs Firmware
Nec aterm Wx1500hp Firmware
Nec aterm Wx3000hp Firmware
Nec aterm Wx3600hp Firmware
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}

Type Values Removed Values Added
First Time appeared Nec
Nec aterm W1200ex(-ms)
Nec aterm Wf1200cr
Nec aterm Wg1200cr
Nec aterm Wg1200hp2
Nec aterm Wg1200hp3
Nec aterm Wg1200hp4
Nec aterm Wg1200hs2
Nec aterm Wg1200hs3
Nec aterm Wg1200hs4
Nec aterm Wg1800hp3
Nec aterm Wg1800hp4
Nec aterm Wg1900hp
Nec aterm Wg1900hp2
Nec aterm Wg2600hm4
Nec aterm Wg2600hp4
Nec aterm Wg2600hs
Nec aterm Wg2600hs2
Nec aterm Wx1500hp
Nec aterm Wx3000hp
Nec aterm Wx3600hp
Vendors & Products Nec
Nec aterm W1200ex(-ms)
Nec aterm Wf1200cr
Nec aterm Wg1200cr
Nec aterm Wg1200hp2
Nec aterm Wg1200hp3
Nec aterm Wg1200hp4
Nec aterm Wg1200hs2
Nec aterm Wg1200hs3
Nec aterm Wg1200hs4
Nec aterm Wg1800hp3
Nec aterm Wg1800hp4
Nec aterm Wg1900hp
Nec aterm Wg1900hp2
Nec aterm Wg2600hm4
Nec aterm Wg2600hp4
Nec aterm Wg2600hs
Nec aterm Wg2600hs2
Nec aterm Wx1500hp
Nec aterm Wx3000hp
Nec aterm Wx3600hp
Type Values Removed Values Added
Title Missing Authorization Enables Unauthorized Retrieval and Modification on NEC Aterm Routers
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Weaknesses CWE-862
References
Metrics cvssV4_0

{'score': 6.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
NEC
Published
Updated
Apr 10, 2026, 4:10 AM
Reserved
Mar 17, 2026, 1:53 AM
Status
Analyzed
Published
Mar 27, 2026, 12:16 PM
Modified
Oct 26, 2026, 9:10 PM