Skip to content
OpenAdvisories
High · 7.1 CVE-2026-4622 EUVD-2026-16591GHSA-3p29-8vc6-r2ph

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Published Mar 27, 2026 · Updated Apr 10, 2026 · Assigned by NEC

Vendor: NEC Platforms Product: Aterm GB1200PE Product: Aterm WF1200CR Product: Aterm WG1200CR Product: Aterm WG2600HM4 Product: Aterm WG2600HP4 Product: Aterm WG2600HS Product: Aterm WG2600HS2 Product: Aterm WX3000HP Product: Aterm WX3000HP2

Description

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Affected products

VendorProductAffectedFixed
NEC Platforms Aterm WG2600HS Before Ver. 1.7.2 —
NEC Platforms Aterm WF1200CR Before Ver. 1.6.0 —
NEC Platforms Aterm WG1200CR Before Ver. 1.5.0 —
NEC Platforms Aterm WG2600HP4 Before Ver. 1.4.2 —
NEC Platforms Aterm WG2600HM4 Before Ver. 1.4.2 —
NEC Platforms Aterm WG2600HS2 Before Ver. 1.3.2 —
NEC Platforms Aterm WX3000HP Before Ver. 2.5.0 —
NEC Platforms Aterm WX3000HP2 Before Ver. 1.3.2 —
NEC Platforms Aterm GB1200PE Before Ver. 1.3.1 —

References