CVE-2026-4621

MediumCVSS 5.6/10Last modified Oct 26, 2026

Description

Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.

Metrics

CVSS 3.1 5.6/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-912

Affected software

VendorProductVersions
NEC Platforms, Ltd.Aterm W1200EX(-MS)All versions
NEC Platforms, Ltd.Aterm WG1200HP2All versions
NEC Platforms, Ltd.Aterm WG1900HPAll versions
NEC Platforms, Ltd.Aterm WG1200HS2All versions
NEC Platforms, Ltd.Aterm WG1800HP3All versions
NEC Platforms, Ltd.Aterm WG1200HP3All versions
NEC Platforms, Ltd.Aterm WG1900HP2All versions
NEC Platforms, Ltd.Aterm WG1200HS3All versions
NEC Platforms, Ltd.Aterm WG1800HP4All versions
NEC Platforms, Ltd.Aterm WG1200HP4All versions
NEC Platforms, Ltd.Aterm WG1200HS4All versions
NEC Platforms, Ltd.Aterm WX1500HPBefore Ver. 1.4.2
NEC Platforms, Ltd.Aterm WG2600HSBefore Ver. 1.7.2
NEC Platforms, Ltd.Aterm WF1200CRBefore Ver. 1.6.0
NEC Platforms, Ltd.Aterm WG1200CRBefore Ver. 1.5.0
NEC Platforms, Ltd.Aterm WG2600HP4Before Ver. 1.4.2
NEC Platforms, Ltd.Aterm WG2600HM4Before Ver. 1.4.2
NEC Platforms, Ltd.Aterm WG2600HS2Before Ver. 1.3.2
NEC Platforms, Ltd.Aterm WX3000HPBefore Ver. 2.5.0
NEC Platforms, Ltd.Aterm WX3000HP2Before Ver. 1.3.2
NEC Platforms, Ltd.Aterm WX3600HPBefore Ver. 1.4.2
NEC Platforms, Ltd.Aterm GX1200HPAll versions
NEC Platforms, Ltd.Aterm GX1200HS4All versions
NEC Platforms, Ltd.Aterm WG1200DM4All versions
NEC Platforms, Ltd.Aterm GB1200PEBefore Ver. 1.3.1

References

Timeline

Published
Mar 27, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-462107.8In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmt_src during MBPF check During coCVE-2026-462115.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() mCVE-2026-462128.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when deleting claims When bataCVE-2026-462137.8In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path Commit 3822CVE-2026-462145.5In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch virtioCVE-2026-462157.8In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in change_handle There wCVE-2026-462165.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_statusCVE-2026-462187.1In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn CVE-2026-462197.8In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on unbind The state machine work is sCVE-2026-46229.8OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.CVE-2026-462205.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission sdma_vCVE-2026-462215.5In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated
CVE-2026-4621: Medium severity, CVSS 5.6 | Vulnix