VulnerabilityAnalyzed
CVE-2026-4309
Missing Authorization vulnerability in NEC Platforms, Ltd.
MEDIUM 6.3EPSS 0.14%
Does this matter?
Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.
Description
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
- CVSS 4.0
- 6.3 MEDIUMCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.14% probability · 4th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-862
- Affected
- nec/aterm wg2600hs firmware · nec/aterm wf1200cr firmware · nec/aterm wg1200cr firmware · nec/aterm wg2600hp4 firmware · nec/aterm wg2600hm4 firmware · nec/aterm wg2600hs2 firmware · nec/aterm wx3000hp firmware · nec/aterm wx3600hp firmware · nec/aterm w1200ex-ms firmware · nec/aterm wg1200hp2 firmware · nec/aterm wg1900hp firmware · nec/aterm wg1200hs2 firmware · nec/aterm wg1800hp3 firmware · nec/aterm wg1200hp3 firmware · nec/aterm wg1900hp2 firmware · nec/aterm wg1200hs3 firmware · nec/aterm wg1800hp4 firmware · nec/aterm wg1200hp4 firmware · nec/aterm wg1200hs4 firmware · nec/aterm wx1500hp firmware
- Source
- psirt-info@cyber.jp.nec.com
EPSS 0.1% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://jpn.nec.com/security-info/secinfo/nv26-001_en.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.