OS Command Injection in NEC Platforms Aterm Series
CVE-2026-4620

7.1HIGH

Key Information:

Vendor
CVE Published:
27 March 2026

What is CVE-2026-4620?

An OS Command Injection vulnerability exists in the NEC Platforms Aterm Series, enabling attackers to execute arbitrary operating system commands through network interfaces. This flaw poses significant risks, as it can allow malicious users to gain unauthorized access and control over affected devices. Users of the Aterm Series are encouraged to review the security guidance provided by NEC to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Aterm WX1500HP Before Ver. 1.4.2

Aterm WX3600HP Before Ver. 1.4.2

References

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Zero Zero One Co., Ltd.
.