Nec Aterm WX3000HP2 Firmware vulnerabilities

2 CVEs affecting Nec Aterm WX3000HP2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4622, published 2026-03-27.

More from Nec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-4622, published 2026-03-27. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
• CVE-2026-4621, published 2026-03-27. Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days. Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.