Nec Aterm WX3000HP Firmware vulnerabilities

4 CVEs affecting Nec Aterm WX3000HP Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4622, published 2026-03-27.

More from Nec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-4622, published 2026-03-27. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
• CVE-2021-20712, published 2021-04-26. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed…
• CVE-2026-4621, published 2026-03-27. Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days. Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
• CVE-2026-4309, published 2026-03-27. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.