6.3
CVE-2026-4621
- EPSS 0.06%
- Veröffentlicht 27.03.2026 12:16:20
- Zuletzt bearbeitet 20.04.2026 15:20:06
- Quelle psirt-info@cyber.jp.nec.com
- CVE-Watchlists
- Unerledigt
Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nec ≫ Aterm Wg2600hs Firmware Version < 1.7.2
Nec ≫ Aterm Wf1200cr Firmware Version < 1.6.0
Nec ≫ Aterm Wg1200cr Firmware Version < 1.5.0
Nec ≫ Aterm Wg2600hp4 Firmware Version < 1.4.2
Nec ≫ Aterm Wg2600hm4 Firmware Version < 1.4.2
Nec ≫ Aterm Wg2600hs2 Firmware Version < 1.3.2
Nec ≫ Aterm Wx3000hp Firmware Version < 2.5.0
Nec ≫ Aterm Wx3600hp Firmware Version <= 1.5.3
Nec ≫ Aterm Wx1500hp Firmware Version < 1.4.2
Nec ≫ Aterm Wx3000hp2 Firmware Version < 1.3.2
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.182 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.6 | 2.2 | 3.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
|
| psirt-info@cyber.jp.nec.com | 6.3 | 0 | 0 |
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-912 Hidden Functionality
The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.