High severity8.8NVD Advisory· Published Feb 21, 2020· Updated Jun 17, 2026

CVE-2020-5524

Description

Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via UPnP function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NEC/Aterm Wf1200c Firmware
cpe:2.3:o:nec:aterm_wf1200c_firmware:*:*:*:*:*:*:*:*
Range: <=1.2.1
NEC/Aterm Wg1200cr Firmware
cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*
Range: <=1.2.1
NEC/Aterm Wg2600hs Firmware
cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*
Range: <=1.3.2
NEC/Aterm WG2600HPllm-fuzzy
Range: <=1.3.2
NEC/Aterm WF1200CRSllm-fuzzy
Range: <=1.2.1
NEC/Aterm WG1200CRSllm-fuzzy
Range: <=1.2.1
NEC Corporation/Aterm seriesv5
Range: Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier

Patches

Vulnerability mechanics

References

jpn.nec.com/security-info/secinfo/nv20-003.htmlnvdNot ApplicableThird Party Advisory
jvn.jp/en/jp/JVN25766797/nvdThird Party Advisory
jvn.jp/en/jp/JVN49410695/index.htmlnvdNot ApplicableThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000