Hidden Functionality vulnerability in NEC Platforms, Ltd.
Priority LOW 27CWE-912Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00163 5th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NEC Platforms, Ltd. | Aterm W1200EX(-MS) | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1200HP2 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1900HP | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1200HS2 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1800HP3 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1200HP3 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1900HP2 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1200HS3 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1800HP4 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1200HP4 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1200HS4 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WX1500HP | Before Ver. 1.4.2 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG2600HS | Before Ver. 1.7.2 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WF1200CR | Before Ver. 1.6.0 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1200CR | Before Ver. 1.5.0 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG2600HP4 | Before Ver. 1.4.2 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG2600HM4 | Before Ver. 1.4.2 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG2600HS2 | Before Ver. 1.3.2 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WX3000HP | Before Ver. 2.5.0 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WX3000HP2 | Before Ver. 1.3.2 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WX3600HP | Before Ver. 1.4.2 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm GX1200HP | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm GX1200HS4 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm WG1200DM4 | All versions | — | No fix listed | CNA |
| NEC Platforms, Ltd. | Aterm GB1200PE | Before Ver. 1.3.1 | — | No fix listed | CNA |
- Aterm W1200EX(-MS) VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1200HP2 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1900HP VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1200HS2 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1800HP3 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1200HP3 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1900HP2 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1200HS3 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1800HP4 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1200HP4 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1200HS4 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WX1500HP VendorNEC Platforms, Ltd. Affected Before Ver. 1.4.2 Fixed in — No fix listed CNA
- Aterm WG2600HS VendorNEC Platforms, Ltd. Affected Before Ver. 1.7.2 Fixed in — No fix listed CNA
- Aterm WF1200CR VendorNEC Platforms, Ltd. Affected Before Ver. 1.6.0 Fixed in — No fix listed CNA
- Aterm WG1200CR VendorNEC Platforms, Ltd. Affected Before Ver. 1.5.0 Fixed in — No fix listed CNA
- Aterm WG2600HP4 VendorNEC Platforms, Ltd. Affected Before Ver. 1.4.2 Fixed in — No fix listed CNA
- Aterm WG2600HM4 VendorNEC Platforms, Ltd. Affected Before Ver. 1.4.2 Fixed in — No fix listed CNA
- Aterm WG2600HS2 VendorNEC Platforms, Ltd. Affected Before Ver. 1.3.2 Fixed in — No fix listed CNA
- Aterm WX3000HP VendorNEC Platforms, Ltd. Affected Before Ver. 2.5.0 Fixed in — No fix listed CNA
- Aterm WX3000HP2 VendorNEC Platforms, Ltd. Affected Before Ver. 1.3.2 Fixed in — No fix listed CNA
- Aterm WX3600HP VendorNEC Platforms, Ltd. Affected Before Ver. 1.4.2 Fixed in — No fix listed CNA
- Aterm GX1200HP VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm GX1200HS4 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm WG1200DM4 VendorNEC Platforms, Ltd. Affected All versions Fixed in — No fix listed CNA
- Aterm GB1200PE VendorNEC Platforms, Ltd. Affected Before Ver. 1.3.1 Fixed in — No fix listed CNA
CPE configurations NVD · 42
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:nec:aterm_wg1200hp4_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1200hp4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:* | before 1.7.2 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg2600hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:* | before 1.6.0 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wf1200cr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:* | before 1.5.0 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1200cr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:* | before 1.4.2 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg2600hp4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
- cpe:2.3:o:nec:aterm_wg1200hp4_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1200hp4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:* Versions before 1.7.2 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg2600hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:* Versions before 1.6.0 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wf1200cr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1200cr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg2600hp4_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg2600hp4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
Show 32 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:* | before 1.4.2 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg2600hm4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:* | before 1.3.2 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg2600hs2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:* | before 2.5.0 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wx3000hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wx3600hp_firmware:*:*:*:*:*:*:*:* | up to 1.5.3 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wx3600hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_w1200ex-ms_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_w1200ex-ms:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1200hp2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1200hp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1900hp_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1900hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1200hs2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1200hs2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1800hp3_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1800hp3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1200hp3_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1200hp3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1900hp2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1900hp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1200hs3_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1200hs3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1800hp4_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1800hp4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wg1200hs4_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wg1200hs4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wx1500hp_firmware:*:*:*:*:*:*:*:* | before 1.4.2 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wx1500hp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
| cpe:2.3:o:nec:aterm_wx3000hp2_firmware:*:*:*:*:*:*:*:* | before 1.3.2 | Vulnerable | NEC Corporation |
| cpe:2.3:h:nec:aterm_wx3000hp2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NEC Corporation |
- cpe:2.3:o:nec:aterm_wg2600hm4_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg2600hm4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg2600hs2_firmware:*:*:*:*:*:*:*:* Versions before 1.3.2 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg2600hs2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:* Versions before 2.5.0 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wx3000hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wx3600hp_firmware:*:*:*:*:*:*:*:* Versions up to 1.5.3 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wx3600hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_w1200ex-ms_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_w1200ex-ms:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1200hp2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1200hp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1900hp_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1900hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1200hs2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1200hs2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1800hp3_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1800hp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1200hp3_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1200hp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1900hp2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1900hp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1200hs3_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1200hs3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1800hp4_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1800hp4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wg1200hs4_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wg1200hs4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wx1500hp_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wx1500hp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
- cpe:2.3:o:nec:aterm_wx3000hp2_firmware:*:*:*:*:*:*:*:* Versions before 1.3.2 Vulnerable ·NEC Corporation
- cpe:2.3:h:nec:aterm_wx3000hp2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NEC Corporation
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2026-4621
- 2026-10-03 Alias added: GHSA-v782-gww8-28q2
References
More NEC Platforms, Ltd. vulnerabilities
- TI-2023-03494 OS command injection in NEC Platforms, Ltd. ITK-6DGS-1 TEL CVSS 3.1CRITICAL 9.8
- TI-2024-02823 NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an… CVSS 3.1CRITICAL 9.1
- TI-2022-09210 OS command injection in NEC Platforms, Ltd. UNIVERGE DT CVSS 3.1CRITICAL 9.8
- TI-2026-07601 OS command injection in NEC Platforms, Ltd. Aterm MR51FN CVSS 4.0HIGH 8.5
- TI-2020-04602 OS command injection in NEC Corporation Aterm SA3500G CVSS 3.1HIGH 8.8
- TI-2018-00570 Improper privilege management in NEC Platforms, Ltd. Calsos CSDX and CSDJ series products CVSS 3.0HIGH 8.8
Sources
- CVE-2026-4621 · CVE Program
- CVE-2026-4621 · NVD
- FIRST EPSS
- GHSA-v782-gww8-28q2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences