Nec Aterm WX3600HP Firmware vulnerabilities

4 CVEs affecting Nec Aterm WX3600HP Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4621, published 2026-03-27.

More from Nec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-4620, published 2026-03-27. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.
• CVE-2026-4619, published 2026-03-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.
• CVE-2026-4621, published 2026-03-27. Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days. Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
• CVE-2026-4309, published 2026-03-27. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.