CVE-2026-4309: Medium severity NEC Platforms Aterm Series vulnerability
Published Mar 27, 2026
·Updated
Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
Affected Software
41 affected components
NEC Platforms Aterm Series
All of the following
NEC Aterm WG2600HS firmware<1.7.2
NEC Aterm WG2600HS
All of the following
NEC Aterm WF1200CR firmware<1.6.0
NEC Aterm WF1200CR
All of the following
NEC Aterm WG1200CR firmware<1.5.0
NEC Aterm WG1200CR
All of the following
NEC Aterm Wg2600hp4 Firmware<1.4.2
NEC Aterm WG2600HP4
All of the following
NEC Aterm Wg2600hm4 Firmware<1.4.2
NEC Aterm WG2600HM4
All of the following
NEC Aterm Wg2600hs2 Firmware<1.3.2
NEC Aterm WG2600HS2
All of the following
NEC Aterm WX3000HP firmware<2.5.0
NEC Aterm WX3000HP
All of the following
NEC Aterm Wx3600hp Firmware<=1.5.3
NEC Aterm WX3600HP
All of the following
NEC Aterm W1200EX-MS firmware
NEC Aterm W1200EX-MS
All of the following
NEC Aterm WG1200HP2 firmware
NEC Aterm WG1200HP2
All of the following
NEC Aterm WG1900HP firmware
NEC Aterm WG1900HP
All of the following
NEC Aterm WG1200HS2 firmware
NEC Aterm WG1200HS2
All of the following
NEC Aterm WG1800HP3 firmware
NEC Aterm WG1800HP3
All of the following
NEC Aterm WG1200HP3 firmware
NEC Aterm WG1200HP3
All of the following
NEC Aterm WG1900HP2 firmware
NEC Aterm WG1900HP2
All of the following
NEC Aterm Wg1200hs3 Firmware
NEC Aterm Wg1200hs3
All of the following
NEC Aterm WG1800HP4 firmware
NEC Aterm WG1800HP4
All of the following
NEC Aterm Wg1200hp4 Firmware
NEC Aterm Wg1200hp4
All of the following
NEC Aterm Wg1200hs4 Firmware
NEC Aterm Wg1200hs4
All of the following
NEC Aterm Wx1500hp Firmware<1.4.2
NEC Aterm WX1500HP
Event History
Mar 27, 2026
CVE Published
via MITRE·11:46 AM
Data Sourced
via MITRE·11:46 AM
DescriptionWeakness
Data Sourced
via NVD·12:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-4309?
CVE-2026-4309 has a high severity rating due to its potential to allow unauthorized access to device settings.
2
How do I fix CVE-2026-4309?
To fix CVE-2026-4309, ensure that your device firmware is updated to the latest version with security patches applied.
3
What type of attack does CVE-2026-4309 enable?
CVE-2026-4309 enables attackers to retrieve device information and modify settings without proper authorization.
4
Which devices are affected by CVE-2026-4309?
CVE-2026-4309 affects NEC Platforms Aterm Series devices.
5
Can CVE-2026-4309 lead to data breaches?
Yes, CVE-2026-4309 can potentially lead to data breaches if attackers exploit the vulnerability to access sensitive information.