CVE-2026-4309: Nec Aterm w1200ex-Ms Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.

Affected products

• Nec Aterm w1200ex-Ms Firmware: any version
• Nec Aterm WF1200CR Firmware: before 1.6.0 (fixed in 1.6.0)
• Nec Aterm WG1200CR Firmware: before 1.5.0 (fixed in 1.5.0)
• Nec Aterm WG1200HP2 Firmware: any version
• Nec Aterm WG1200HP3 Firmware: any version
• Nec Aterm WG1200HP4 Firmware: any version
• Nec Aterm WG1200HS2 Firmware: any version
• Nec Aterm WG1200HS3 Firmware: any version
• Nec Aterm WG1200HS4 Firmware: any version
• Nec Aterm WG1800HP3 Firmware: any version
• Nec Aterm WG1800HP4 Firmware: any version
• Nec Aterm WG1900HP2 Firmware: any version
• Nec Aterm WG1900HP Firmware: any version
• Nec Aterm WG2600HM4 Firmware: before 1.4.2 (fixed in 1.4.2)
• Nec Aterm WG2600HP4 Firmware: before 1.4.2 (fixed in 1.4.2)
• Nec Aterm WG2600HS2 Firmware: before 1.3.2 (fixed in 1.3.2)
• Nec Aterm WG2600HS Firmware: before 1.7.2 (fixed in 1.7.2)
• Nec Aterm WX1500HP Firmware: before 1.4.2 (fixed in 1.4.2)
• Nec Aterm WX3000HP Firmware: before 2.5.0 (fixed in 2.5.0)
• Nec Aterm WX3600HP Firmware: up to and including 1.5.3

Published 2026-03-27. Last modified 2026-06-17.