CVE-2026-4309

MEDIUM

NEC Aterm W1200EX(-MS) - Auth Bypass

Title source: llm

Description

Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.

References (1)

https://jpn.nec.com/security-info/secinfo/nv26-001_en.html

Scores

CVSS v3 6.5

EPSS 0.0004

EPSS Percentile 11.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Details

CWE

CWE-862

Status published

Products (44)

nec/aterm_w1200ex-ms_firmware

nec/aterm_wf1200cr_firmware < 1.6.0

nec/aterm_wg1200cr_firmware < 1.5.0

nec/aterm_wg1200hp2_firmware

nec/aterm_wg1200hp3_firmware

nec/aterm_wg1200hp4_firmware

nec/aterm_wg1200hs2_firmware

nec/aterm_wg1200hs3_firmware

nec/aterm_wg1200hs4_firmware

nec/aterm_wg1800hp3_firmware

... and 34 more

Published Mar 27, 2026

Tracked Since Mar 27, 2026