Missing Authorization vulnerability in NEC Platforms, Ltd.

Summary

Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.

Timeline

1. Mar 27, 2026, 11:46 AM UTCCVE published
2. Mar 27, 2026, 12:00 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Apr 10, 2026, 4:10 AM UTCRecord last updated

Affected versions

• NEC Platforms, Ltd. Aterm W1200EX(-MS)

  All versions

• NEC Platforms, Ltd. Aterm WG1200HP2

  All versions

• NEC Platforms, Ltd. Aterm WG1900HP

  All versions

• NEC Platforms, Ltd. Aterm WG1200HS2

  All versions

• NEC Platforms, Ltd. Aterm WG1800HP3

  All versions

• NEC Platforms, Ltd. Aterm WG1200HP3

  All versions

• NEC Platforms, Ltd. Aterm WG1900HP2

  All versions

• NEC Platforms, Ltd. Aterm WG1200HS3

  All versions

• NEC Platforms, Ltd. Aterm WG1800HP4

  All versions

• NEC Platforms, Ltd. Aterm WG1200HP4

  All versions

• NEC Platforms, Ltd. Aterm WG1200HS4

  All versions

• NEC Platforms, Ltd. Aterm WX1500HP

  Before Ver. 1.4.2

• NEC Platforms, Ltd. Aterm WG2600HS

  Before Ver. 1.7.2

• NEC Platforms, Ltd. Aterm WF1200CR

  Before Ver. 1.6.0

• NEC Platforms, Ltd. Aterm WG1200CR

  Before Ver. 1.5.0

• NEC Platforms, Ltd. Aterm WG2600HP4

  Before Ver. 1.4.2

• NEC Platforms, Ltd. Aterm WG2600HM4

  Before Ver. 1.4.2

• NEC Platforms, Ltd. Aterm WG2600HS2

  Before Ver. 1.3.2

• NEC Platforms, Ltd. Aterm WX3000HP

  Before Ver. 2.5.0

• NEC Platforms, Ltd. Aterm WX3600HP

  Before Ver. 1.5.3

• NEC Platforms, Ltd. Aterm GX1200HP

  All versions

• NEC Platforms, Ltd. Aterm GX1200HS4

  All versions

• NEC Platforms, Ltd. Aterm WG1200DM4

  All versions

• NEC Platforms, Ltd. Aterm GB1200PE

  Before Ver. 1.3.1

References 1