CVE-2026-4621

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4621", "assignerOrgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282", "state": "PUBLISHED", "assignerShortName": "NEC", "dateReserved": "2026-03-23T06:04:48.670Z", "datePublished": "2026-03-27T11:52:48.222Z", "dateUpdated": "2026-04-10T04:13:59.147Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282", "shortName": "NEC", "dateUpdated": "2026-04-10T04:13:59.147Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-912", "description": "CWE-912: Hidden Functionality", "type": "CWE"}]}], "affected": [{"vendor": "NEC Platforms, Ltd.", "product": "Aterm W1200EX(-MS)", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HP2", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1900HP", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HS2", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1800HP3", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HP3", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1900HP2", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HS3", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1800HP4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HP4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HS4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WX1500HP", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG2600HS", "versions": [{"status": "affected", "version": "Before Ver. 1.7.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WF1200CR", "versions": [{"status": "affected", "version": "Before Ver. 1.6.0"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200CR", "versions": [{"status": "affected", "version": "Before Ver. 1.5.0"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG2600HP4", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG2600HM4", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG2600HS2", "versions": [{"status": "affected", "version": "Before Ver. 1.3.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WX3000HP", "versions": [{"status": "affected", "version": "Before Ver. 2.5.0"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WX3000HP2", "versions": [{"status": "affected", "version": "Before Ver. 1.3.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WX3600HP", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm GX1200HP", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm GX1200HS4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200DM4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm GB1200PE", "versions": [{"status": "affected", "version": "Before Ver. 1.3.1"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network."}]}], "references": [{"url": "https://jpn.nec.com/security-info/secinfo/nv26-001_en.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.3, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}}], "credits": [{"lang": "en", "value": "Chuya Hayakawa of Zero Zero One Co., Ltd.", "user": "00000000-0000-4000-9000-000000000000", "type": "reporter"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-27T12:57:21.304368Z", "id": "CVE-2026-4621", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T12:57:32.214Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4621", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-27T12:57:21.304368Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T12:57:28.056Z"}}], "cna": {"source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Chuya Hayakawa of Zero Zero One Co., Ltd."}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NEC Platforms, Ltd.", "product": "Aterm W1200EX(-MS)", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HP2", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1900HP", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HS2", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1800HP3", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HP3", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1900HP2", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HS3", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1800HP4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HP4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200HS4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WX1500HP", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG2600HS", "versions": [{"status": "affected", "version": "Before Ver. 1.7.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WF1200CR", "versions": [{"status": "affected", "version": "Before Ver. 1.6.0"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200CR", "versions": [{"status": "affected", "version": "Before Ver. 1.5.0"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG2600HP4", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG2600HM4", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG2600HS2", "versions": [{"status": "affected", "version": "Before Ver. 1.3.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WX3000HP", "versions": [{"status": "affected", "version": "Before Ver. 2.5.0"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WX3000HP2", "versions": [{"status": "affected", "version": "Before Ver. 1.3.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WX3600HP", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm GX1200HP", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm GX1200HS4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm WG1200DM4", "versions": [{"status": "affected", "version": "All versions"}], "defaultStatus": "unknown"}, {"vendor": "NEC Platforms, Ltd.", "product": "Aterm GB1200PE", "versions": [{"status": "affected", "version": "Before Ver. 1.3.1"}], "defaultStatus": "unknown"}], "references": [{"url": "https://jpn.nec.com/security-info/secinfo/nv26-001_en.html"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.", "supportingMedia": [{"type": "text/html", "value": "Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-912", "description": "CWE-912: Hidden Functionality"}]}], "providerMetadata": {"orgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282", "shortName": "NEC", "dateUpdated": "2026-04-10T04:13:59.147Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4621", "state": "PUBLISHED", "dateUpdated": "2026-04-10T04:13:59.147Z", "dateReserved": "2026-03-23T06:04:48.670Z", "assignerOrgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282", "datePublished": "2026-03-27T11:52:48.222Z", "assignerShortName": "NEC"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Aterm W1200EX(-MS)", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1200HP2", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1900HP", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1200HS2", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1800HP3", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1200HP3", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1900HP2", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1200HS3", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1800HP4", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1200HP4", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1200HS4", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WX1500HP", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}]}, {"defaultStatus": "unknown", "product": "Aterm WG2600HS", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.7.2"}]}, {"defaultStatus": "unknown", "product": "Aterm WF1200CR", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.6.0"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1200CR", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.5.0"}]}, {"defaultStatus": "unknown", "product": "Aterm WG2600HP4", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}]}, {"defaultStatus": "unknown", "product": "Aterm WG2600HM4", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}]}, {"defaultStatus": "unknown", "product": "Aterm WG2600HS2", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.3.2"}]}, {"defaultStatus": "unknown", "product": "Aterm WX3000HP", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 2.5.0"}]}, {"defaultStatus": "unknown", "product": "Aterm WX3000HP2", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.3.2"}]}, {"defaultStatus": "unknown", "product": "Aterm WX3600HP", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.4.2"}]}, {"defaultStatus": "unknown", "product": "Aterm GX1200HP", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm GX1200HS4", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm WG1200DM4", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "All versions"}]}, {"defaultStatus": "unknown", "product": "Aterm GB1200PE", "vendor": "NEC Platforms, Ltd.", "versions": [{"status": "affected", "version": "Before Ver. 1.3.1"}]}], "source": "psirt-info@cyber.jp.nec.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1200hp4_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "ABEF9893-7104-4EFB-8504-58F2B8CF95D4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1200hp4:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A89DF7B-F002-43C6-BD55-AD93A12522E5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B9BC68AC-B83D-4E0B-9B8D-23477CE698B5", "versionEndExcluding": "1.7.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg2600hs:-:*:*:*:*:*:*:*", "matchCriteriaId": "623C9C7B-C947-49A8-9C1D-20B23FDA73ED", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FE8EF43A-B179-4352-A9C9-09A13AEB63AC", "versionEndExcluding": "1.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wf1200cr:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A91D9EB-5962-498E-9B14-C5712DDDF7C2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1BD83BE-3C42-417E-838F-A5D6FB63443F", "versionEndExcluding": "1.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1200cr:-:*:*:*:*:*:*:*", "matchCriteriaId": "936D9DD3-11E5-4862-B157-85B13EA06C38", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E67DF3D-78B9-4B64-B3D1-B3A0B9951B83", "versionEndExcluding": "1.4.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg2600hp4:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CA71E45-3623-423D-A1E7-FA7617A22EBD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8631153A-E9AE-4288-B1BD-B035CF51063C", "versionEndExcluding": "1.4.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg2600hm4:-:*:*:*:*:*:*:*", "matchCriteriaId": "20D6198A-B5F8-4E5E-94AE-0C657EBAB137", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B3D92216-F37F-49DE-978E-CB9A657D3FE7", "versionEndExcluding": "1.3.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg2600hs2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EA952A10-D2C7-4155-B805-B5DE9CFA5B96", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4C5E53E-B37C-4FA6-BE0E-F78C168A7E8C", "versionEndExcluding": "2.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wx3000hp:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F34C11C-91C8-4DE6-B170-06C857E9E3F3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wx3600hp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "555D2A1F-56A2-48E3-A046-FBF1EAF865B6", "versionEndIncluding": "1.5.3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wx3600hp:-:*:*:*:*:*:*:*", "matchCriteriaId": "49BA8EF7-AE6D-4E69-A14B-410127D41E01", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_w1200ex-ms_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EAFDE7A7-2355-434E-929A-E50B0BD5F584", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_w1200ex-ms:-:*:*:*:*:*:*:*", "matchCriteriaId": "29756D80-6095-4CCA-9436-FA61503B2E47", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1200hp2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4C68B7B4-AA6C-4222-BDC4-AF1E442B248A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1200hp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "90D0B0AE-064D-4E48-9155-47ECDFBAAE26", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1900hp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B0826424-1B25-44AD-A60D-7B62C1148B1C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1900hp:-:*:*:*:*:*:*:*", "matchCriteriaId": "1EE892DF-9165-4ED3-B5F4-B3232BC7B07A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1200hs2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DD777679-3495-4BDE-923C-5196FB8D2788", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1200hs2:-:*:*:*:*:*:*:*", "matchCriteriaId": "65C2F75B-CA40-4795-ABD4-2101A1DF1EDA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1800hp3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BFF80998-6400-48F3-A990-D5B87C665D34", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1800hp3:-:*:*:*:*:*:*:*", "matchCriteriaId": "87EF7C61-A13A-4EF8-8034-90D7E2AD3A86", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1200hp3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8BB35FC8-62FF-4A6D-AB97-883FCEE8307B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1200hp3:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB299D6D-056F-4F75-AD19-81F11C79CA08", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1900hp2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5E2AB180-F2E1-47F9-BBB1-A2D94325DEDC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1900hp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "189508FB-75EC-49CE-A6F5-3E4A8F3E57E7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1200hs3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "644FC7C2-94C6-48DF-B487-2F97FF752CAB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1200hs3:-:*:*:*:*:*:*:*", "matchCriteriaId": "0BE6AFC0-F46F-491F-88E0-5EB17420F5EE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1800hp4_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "64691C9F-576D-416E-A6B0-042FEE21DD06", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1800hp4:-:*:*:*:*:*:*:*", "matchCriteriaId": "D9130B16-D277-4335-8FBF-83715094FA70", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wg1200hs4_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E9E29E36-6D47-4CD4-BEDB-7F480FBF2834", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wg1200hs4:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4840DCB-8E32-4989-A89E-BA787CE4B3F9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wx1500hp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2724C104-05C2-4907-A2DE-E6E3D3BC1E8F", "versionEndExcluding": "1.4.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wx1500hp:-:*:*:*:*:*:*:*", "matchCriteriaId": "1326D2EC-FF31-45A7-8DCE-1371DA0FD779", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nec:aterm_wx3000hp2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC5AF3B6-76AD-4E18-8427-61D0D8260AD1", "versionEndExcluding": "1.3.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nec:aterm_wx3000hp2:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2D80835-26A0-48E9-AF95-76F06ADB21EF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network."}, {"lang": "es", "value": "Vulnerabilidad de funcionalidad oculta en NEC Platforms, Ltd. Aterm Series permite a un atacante habilitar telnet a trav\u00e9s de la red."}], "id": "CVE-2026-4621", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.4, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt-info@cyber.jp.nec.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4621", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-27T12:57:21.304368Z", "version": "2.0.3"}}]}, "published": "2026-03-27T12:16:20.910", "references": [{"source": "psirt-info@cyber.jp.nec.com", "tags": ["Vendor Advisory"], "url": "https://jpn.nec.com/security-info/secinfo/nv26-001_en.html"}], "sourceIdentifier": "psirt-info@cyber.jp.nec.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-912"}], "source": "psirt-info@cyber.jp.nec.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm W1200EX(-MS)", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_w1200ex(-ms)", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.6.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WF1200CR", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wf1200cr", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.5.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1200CR", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1200cr", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1200HP2", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1200hp2", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1200HP3", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1200hp3", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1200HP4", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1200hp4", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1200HS2", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1200hs2", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1200HS3", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1200hs3", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1200HS4", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1200hs4", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1800HP3", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1800hp3", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1800HP4", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1800hp4", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1900HP", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1900hp", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG1900HP2", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg1900hp2", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.4.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG2600HM4", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg2600hm4", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.4.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG2600HP4", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg2600hp4", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.7.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG2600HS", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg2600hs", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.3.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WG2600HS2", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wg2600hs2", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.4.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WX1500HP", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wx1500hp", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.5.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WX3000HP", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wx3000hp", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.3.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WX3000HP2", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wx3000hp2", "vendor": "nec"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.4.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Aterm WX3600HP", "source": "cna", "vendor": "NEC Platforms, Ltd."}, "product": "aterm_wx3600hp", "vendor": "nec"}], "analysis": {"en": {"generated_at": "2026-03-27T13:51:03.897705+00:00", "value": {"mitigation_remediation": ["Update the device firmware to the latest NEC Aterm release that addresses the hidden Telnet activation flaw", "If no update is available, disable the Telnet service in the device configuration and restrict its use to trusted IP addresses", "Block TCP port 23 (Telnet) at the network perimeter using firewall rules", "Enable logging for configuration changes and monitor logs for unauthorized attempts to enable Telnet"], "summary": {"action": "Apply Patch", "impact": "Enable Telnet via Network"}, "threat_synthesis": {"affected_systems": "NEC Platforms, Ltd. Aterm Series routers and gateways, including models W1200EX(-MS), WF1200CR, WG1200CR, WG1200HP2, WG1200HP3, WG1200HP4, WG1200HS2, WG1200HS3, WG1200HS4, WG1800HP3, WG1800HP4, WG1900HP, WG1900HP2, WG2600HM4, WG2600HP4, WG2600HS, WG2600HS2, WX1500HP, WX3000HP, WX3000HP2, and WX3600HP. No firmware version is specified, so all updates of these models may carry the vulnerability until the vendor issues a corrective release.", "description_and_impact": "A hidden feature in NEC Aterm routers allows an attacker to activate the Telnet service through network traffic. Turning on Telnet exposes a remote command interface that is normally disabled, potentially creating a vector for unauthorized control of the device. The flaw itself is a Remote Service Activation weakness classified as CWE\u2011912.", "risk_and_exploitability": "The CVSS score of 6.3 indicates moderate severity, implying that activating Telnet can compromise device integrity or confidentiality. Exploit probability data is not provided, and the vulnerability is not listed in the CISA KEV catalog, suggesting no public exploitation has been documented. The likely attack vector is remote over the network, meaning any device exposed to the Internet or an untrusted internal network could be targeted to toggle Telnet on."}}}}, "created": "2026-03-27T15:47:04.015078+00:00", "title": "Enable Telnet via Hidden Functionality in NEC Aterm Devices", "updated": "2026-03-30T07:02:08.758243+00:00", "vendors": ["nec", "nec$PRODUCT$aterm_w1200ex(-ms)", "nec$PRODUCT$aterm_wf1200cr", "nec$PRODUCT$aterm_wg1200cr", "nec$PRODUCT$aterm_wg1200hp2", "nec$PRODUCT$aterm_wg1200hp3", "nec$PRODUCT$aterm_wg1200hp4", "nec$PRODUCT$aterm_wg1200hs2", "nec$PRODUCT$aterm_wg1200hs3", "nec$PRODUCT$aterm_wg1200hs4", "nec$PRODUCT$aterm_wg1800hp3", "nec$PRODUCT$aterm_wg1800hp4", "nec$PRODUCT$aterm_wg1900hp", "nec$PRODUCT$aterm_wg1900hp2", "nec$PRODUCT$aterm_wg2600hm4", "nec$PRODUCT$aterm_wg2600hp4", "nec$PRODUCT$aterm_wg2600hs", "nec$PRODUCT$aterm_wg2600hs2", "nec$PRODUCT$aterm_wx1500hp", "nec$PRODUCT$aterm_wx3000hp", "nec$PRODUCT$aterm_wx3000hp2", "nec$PRODUCT$aterm_wx3600hp"]}