CVE-2026-4309

MediumCVSS 6.5

Published: 27/03/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

NEC Platforms Aterm Series devices contain a missing authorization vulnerability. An attacker can obtain specific device information and change settings via the network.

Risk Assessment

An unauthenticated attacker may read device information and modify its configuration over the network, potentially leading to device takeover or disruption.

Recommendation

Apply the firmware update provided by NEC Platforms. Until then, restrict network access to the device management interface.

Other vulnerabilities in NEC Platforms Aterm Series

CVE-2026-4621Medium
A hidden functionality vulnerability in NEC Platforms Aterm Series allows an attacker to enable telnet via the network.

Original NVD description (English source)

Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS