CVE-2021-20712: Nec Aterm WG2600HS Firmware

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function.

Affected products

• Nec Aterm WG2600HS Firmware: up to and including 1.5.1
• Nec Aterm WX3000HP Firmware: up to and including 1.1.2

Published 2021-04-26. Last modified 2026-06-17.