Description
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NEC Platforms | Aterm W1200EX(-MS) | All versions | — |
| NEC Platforms | Aterm WG1200HP2 | All versions | — |
| NEC Platforms | Aterm WG1900HP | All versions | — |
| NEC Platforms | Aterm WG1200HS2 | All versions | — |
| NEC Platforms | Aterm WG1800HP3 | All versions | — |
| NEC Platforms | Aterm WG1200HP3 | All versions | — |
| NEC Platforms | Aterm WG1900HP2 | All versions | — |
| NEC Platforms | Aterm WG1200HS3 | All versions | — |
| NEC Platforms | Aterm WG1800HP4 | All versions | — |
| NEC Platforms | Aterm WG1200HP4 | All versions | — |
| NEC Platforms | Aterm WG1200HS4 | All versions | — |
| NEC Platforms | Aterm WX1500HP | Before Ver. 1.4.2 | — |
| NEC Platforms | Aterm WG2600HS | Before Ver. 1.7.2 | — |
| NEC Platforms | Aterm WF1200CR | Before Ver. 1.6.0 | — |
| NEC Platforms | Aterm WG1200CR | Before Ver. 1.5.0 | — |
| NEC Platforms | Aterm WG2600HP4 | Before Ver. 1.4.2 | — |
| NEC Platforms | Aterm WG2600HM4 | Before Ver. 1.4.2 | — |
| NEC Platforms | Aterm WG2600HS2 | Before Ver. 1.3.2 | — |
| NEC Platforms | Aterm WX3000HP | Before Ver. 2.5.0 | — |
| NEC Platforms | Aterm WX3600HP | Before Ver. 1.5.3 | — |
| NEC Platforms | Aterm GX1200HP | All versions | — |
| NEC Platforms | Aterm GX1200HS4 | All versions | — |
| NEC Platforms | Aterm WG1200DM4 | All versions | — |
| NEC Platforms | Aterm GB1200PE | Before Ver. 1.3.1 | — |