by Kastro
Paper/Archive/CVE-2026-4622

CVE-2026-4622

NEC Platforms, Ltd. Aterm WG2600HS — OS Command Injection vulnerability in NEC Platforms, Ltd.

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.0.590 × 2011.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Affected

ProductAffectedFixed inSource
Aterm WG2600HSBefore Ver. 1.7.2–CNA
Aterm WF1200CRBefore Ver. 1.6.0–CNA
Aterm WG1200CRBefore Ver. 1.5.0–CNA
Aterm WG2600HP4Before Ver. 1.4.2–CNA
Aterm WG2600HM4Before Ver. 1.4.2–CNA
Aterm WG2600HS2Before Ver. 1.3.2–CNA
Aterm WX3000HPBefore Ver. 2.5.0–CNA
Aterm WX3000HP2Before Ver. 1.3.2–CNA
Aterm GB1200PEBefore Ver. 1.3.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NEC (CNA)7.1CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refjpn.nec.com/security-info/secinfo/nv26-001_en.html