Nec Aterm WG1900HP2 Firmware vulnerabilities

15 CVEs affecting Nec Aterm WG1900HP2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4621, published 2026-03-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20680, published 2021-04-26. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier,…
CVE-2024-28012, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2,…
CVE-2024-28014, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2,…
CVE-2024-28015, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2,…
CVE-2024-28009, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2,…
CVE-2024-28007, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2,…
CVE-2024-28011, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P,…
CVE-2024-28008, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N,…
CVE-2024-28010, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP,…
CVE-2024-28006, published 2024-03-28. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2,…

Latest

CVE-2026-4621, published 2026-03-27. Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days. Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
CVE-2026-4309, published 2026-03-27. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.
CVE-2024-28016, published 2024-03-28. Medium severity, CVSS 6.0. EPSS: 0.5% chance of exploitation in the next 30 days. Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P,…
CVE-2024-28013, published 2024-03-28. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP,…