First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-4621

MediumCVSS 5.6/10Last modified Oct 26, 2026

Description

Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.

Metrics

CVSS 3.1 5.6/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
NEC Platforms, Ltd.	Aterm W1200EX(-MS)	All versions
NEC Platforms, Ltd.	Aterm WG1200HP2	All versions
NEC Platforms, Ltd.	Aterm WG1900HP	All versions
NEC Platforms, Ltd.	Aterm WG1200HS2	All versions
NEC Platforms, Ltd.	Aterm WG1800HP3	All versions
NEC Platforms, Ltd.	Aterm WG1200HP3	All versions
NEC Platforms, Ltd.	Aterm WG1900HP2	All versions
NEC Platforms, Ltd.	Aterm WG1200HS3	All versions
NEC Platforms, Ltd.	Aterm WG1800HP4	All versions
NEC Platforms, Ltd.	Aterm WG1200HP4	All versions
NEC Platforms, Ltd.	Aterm WG1200HS4	All versions
NEC Platforms, Ltd.	Aterm WX1500HP	Before Ver. 1.4.2
NEC Platforms, Ltd.	Aterm WG2600HS	Before Ver. 1.7.2
NEC Platforms, Ltd.	Aterm WF1200CR	Before Ver. 1.6.0
NEC Platforms, Ltd.	Aterm WG1200CR	Before Ver. 1.5.0
NEC Platforms, Ltd.	Aterm WG2600HP4	Before Ver. 1.4.2
NEC Platforms, Ltd.	Aterm WG2600HM4	Before Ver. 1.4.2
NEC Platforms, Ltd.	Aterm WG2600HS2	Before Ver. 1.3.2
NEC Platforms, Ltd.	Aterm WX3000HP	Before Ver. 2.5.0
NEC Platforms, Ltd.	Aterm WX3000HP2	Before Ver. 1.3.2
NEC Platforms, Ltd.	Aterm WX3600HP	Before Ver. 1.4.2
NEC Platforms, Ltd.	Aterm GX1200HP	All versions
NEC Platforms, Ltd.	Aterm GX1200HS4	All versions
NEC Platforms, Ltd.	Aterm WG1200DM4	All versions
NEC Platforms, Ltd.	Aterm GB1200PE	Before Ver. 1.3.1

References

https://jpn.nec.com/security-info/secinfo/nv26-001_en.htmlVendor Advisory

Timeline

Published: Mar 27, 2026
Last modified: Oct 26, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-462107.8In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmt_src during MBPF check During co CVE-2026-462115.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() m CVE-2026-462128.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when deleting claims When bata CVE-2026-462137.8In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path Commit 3822 CVE-2026-462145.5In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtio CVE-2026-462157.8In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in change_handle There w CVE-2026-462165.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status CVE-2026-462187.1In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn CVE-2026-462197.8In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on unbind The state machine work is s CVE-2026-46229.8OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.CVE-2026-462205.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission sdma_v CVE-2026-462215.5In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated