← All advisories

Critical severity9.8NVD Advisory· Published Mar 27, 2026· Updated Apr 20, 2026

CVE-2026-4620

CVE-2026-4620

Description

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Affected products

3

NEC/Aterm Wx1500hp Firmware
cpe:2.3:o:nec:aterm_wx1500hp_firmware:*:*:*:*:*:*:*:*
Range: <1.4.2
NEC/Aterm Wx3600hp Firmware
cpe:2.3:o:nec:aterm_wx3600hp_firmware:*:*:*:*:*:*:*:*
Range: <1.5.3
NEC Platforms, Ltd./Aterm Seriesllm-fuzzy

Patches

Vulnerability mechanics

References

1

jpn.nec.com/security-info/secinfo/nv26-001_en.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.