CVE-2026-4309
Missing Authorization vulnerability in NEC Platforms, Ltd.
Published Mar 27, 2026 · updated Jun 17, 2026 · nec aterm wg2600hs firmware
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 27, 2026 · NIST NVD
Detected
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Jun 17, 2026 · NIST NVD
Updated
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Affected
- cpe nec/aterm w1200ex-ms firmwareversion unspecified
- cpe nec/aterm wf1200cr firmwareversion unspecified
- cpe nec/aterm wg1200cr firmwareversion unspecified
- cpe nec/aterm wg1200hp2 firmwareversion unspecified
- cpe nec/aterm wg1200hs2 firmwareversion unspecified
- cpe nec/aterm wg1900hp firmwareversion unspecified
- cpe nec/aterm wg2600hm4 firmwareversion unspecified
- cpe nec/aterm wg2600hp4 firmwareversion unspecified
- cpe nec/aterm wg2600hs firmwareversion unspecified
- cpe nec/aterm wg2600hs2 firmwareversion unspecified
- cpe nec/aterm wx3000hp firmwareversion unspecified
- cpe nec/aterm wx3600hp firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-4309
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-4309
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
nvd.nist.gov