Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

NEC Platforms, Ltd.

Source -

CNA

BOS Name -

NEC Platforms, Ltd.

CNA CVEs -

10

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated ProductsRelated AssignersReports
10Vulnerabilities found
CVE-2026-4620
Assigner-NEC Corporation
ShareView Details
Assigner-NEC Corporation
CVSS Score-7.1||HIGH
EPSS-0.14% / 34.41%
||
7 Day CHG-0.27%
Published-27 Mar, 2026 | 11:53
Updated-20 Apr, 2026 | 15:19
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Action-Not Available
Vendor-NEC Platforms, Ltd.NEC Corporation
Product-aterm_wx3600hpaterm_wx1500hp_firmwareaterm_wx1500hpaterm_wx3600hp_firmwareAterm WX3600HPAterm WX1500HP
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-4622
Assigner-NEC Corporation
ShareView Details
Assigner-NEC Corporation
CVSS Score-7.1||HIGH
EPSS-0.14% / 34.41%
||
7 Day CHG-0.27%
Published-27 Mar, 2026 | 11:53
Updated-20 Apr, 2026 | 15:22
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Action-Not Available
Vendor-NEC Platforms, Ltd.NEC Corporation
Product-aterm_wg2600hsaterm_wg2600hs2_firmwareaterm_wg2600hs2aterm_wg2600hm4aterm_gb1200pe_firmwareaterm_wg2600hp4_firmwareaterm_wf1200cr_firmwareaterm_wg1200cr_firmwareaterm_wg2600hp4aterm_wx3000hp_firmwareaterm_wg2600hm4_firmwareaterm_wf1200craterm_gb1200peaterm_wx3000hpaterm_wx3000hp2_firmwareaterm_wx3000hp2aterm_wg1200craterm_wg2600hs_firmwareAterm WG2600HS2Aterm WG2600HM4Aterm WG1200CRAterm GB1200PEAterm WG2600HP4Aterm WF1200CRAterm WG2600HSAterm WX3000HP2Aterm WX3000HP
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-4621
Assigner-NEC Corporation
ShareView Details
Assigner-NEC Corporation
CVSS Score-6.3||MEDIUM
EPSS-0.05% / 16.63%
||
7 Day CHG-0.01%
Published-27 Mar, 2026 | 11:52
Updated-20 Apr, 2026 | 15:20
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.

Action-Not Available
Vendor-NEC Platforms, Ltd.NEC Corporation
Product-aterm_wg1200hp2aterm_wg1200hp3aterm_wg1800hp4_firmwareaterm_wg2600hm4aterm_w1200ex-ms_firmwareaterm_wg2600hp4_firmwareaterm_wf1200cr_firmwareaterm_wx1500hp_firmwareaterm_wg1900hpaterm_wg1200hs2_firmwareaterm_wg1200cr_firmwareaterm_wg1200hp4_firmwareaterm_wg2600hp4aterm_wg2600hm4_firmwareaterm_wg1200hs4_firmwareaterm_wf1200craterm_wg1800hp3aterm_wx3000hpaterm_wg1900hp_firmwareaterm_wg1200hs3_firmwareaterm_wg1200hp2_firmwareaterm_wg1900hp2_firmwareaterm_wg1200craterm_wx3600hp_firmwareaterm_wg1200hs4aterm_wg2600hsaterm_wg2600hs2_firmwareaterm_wg2600hs2aterm_wx3600hpaterm_wx1500hpaterm_wg1200hp4aterm_wg1200hp3_firmwareaterm_w1200ex-msaterm_wx3000hp_firmwareaterm_wg1200hs2aterm_wg1800hp3_firmwareaterm_wg1800hp4aterm_wx3000hp2_firmwareaterm_wg1200hs3aterm_wx3000hp2aterm_wg2600hs_firmwareaterm_wg1900hp2Aterm WG1200HS3Aterm WG2600HS2Aterm GX1200HS4Aterm WG1200DM4Aterm WG2600HM4Aterm W1200EX(-MS)Aterm WG1800HP3Aterm WX3600HPAterm WG1900HP2Aterm WG1900HPAterm WG2600HP4Aterm WG1200HP4Aterm WX3000HP2Aterm WX3000HPAterm GB1200PEAterm WG1200HP2Aterm WG1200HS4Aterm WG1800HP4Aterm WG1200HS2Aterm WX1500HPAterm WG1200HP3Aterm GX1200HPAterm WG1200CRAterm WF1200CRAterm WG2600HS
CWE ID-CWE-912
Hidden Functionality
CVE-2026-4619
Assigner-NEC Corporation
ShareView Details
Assigner-NEC Corporation
CVSS Score-6||MEDIUM
EPSS-0.06% / 18.51%
||
7 Day CHG~0.00%
Published-27 Mar, 2026 | 11:46
Updated-20 Apr, 2026 | 15:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.

Action-Not Available
Vendor-NEC Platforms, Ltd.NEC Corporation
Product-aterm_wx3600hpaterm_wx3600hp_firmwareAterm WX3600HP
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-4309
Assigner-NEC Corporation
ShareView Details
Assigner-NEC Corporation
CVSS Score-6.3||MEDIUM
EPSS-0.04% / 10.95%
||
7 Day CHG-0.02%
Published-27 Mar, 2026 | 11:46
Updated-20 Apr, 2026 | 15:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.

Action-Not Available
Vendor-NEC Platforms, Ltd.NEC Corporation
Product-aterm_wg1200hp2aterm_wg1200hp3aterm_wg1800hp4_firmwareaterm_wg2600hm4aterm_w1200ex-ms_firmwareaterm_wg2600hp4_firmwareaterm_wf1200cr_firmwareaterm_wx1500hp_firmwareaterm_wg1900hpaterm_wg1200hs2_firmwareaterm_wg1200cr_firmwareaterm_wg2600hp4aterm_wg1200hp4_firmwareaterm_wg2600hm4_firmwareaterm_wg1200hs4_firmwareaterm_wf1200craterm_wg1800hp3aterm_wx3000hpaterm_wg1900hp_firmwareaterm_wg1200hs3_firmwareaterm_wg1200hp2_firmwareaterm_wg1900hp2_firmwareaterm_wg1200craterm_wx3600hp_firmwareaterm_wg1200hs4aterm_wg2600hsaterm_wg2600hs2_firmwareaterm_wg2600hs2aterm_wx3600hpaterm_wx1500hpaterm_wg1200hp4aterm_wg1200hp3_firmwareaterm_w1200ex-msaterm_wx3000hp_firmwareaterm_wg1200hs2aterm_wg1800hp3_firmwareaterm_wg1800hp4aterm_wg1200hs3aterm_wg2600hs_firmwareaterm_wg1900hp2Aterm WG1200HS3Aterm WG2600HS2Aterm GX1200HS4Aterm WG1200DM4Aterm WG2600HM4Aterm W1200EX(-MS)Aterm WG1800HP3Aterm WX3600HPAterm WG1900HP2Aterm WG1900HPAterm WG2600HP4Aterm WG1200HP4Aterm WX3000HPAterm GB1200PEAterm WG1200HP2Aterm WG1200HS4Aterm WG1800HP4Aterm WG1200HS2Aterm WX1500HPAterm WG1200HP3Aterm GX1200HPAterm WG1200CRAterm WF1200CRAterm WG2600HS
CWE ID-CWE-862
Missing Authorization
CVE-2022-25621
Assigner-NEC Corporation
ShareView Details
Assigner-NEC Corporation
CVSS Score-9.8||CRITICAL
EPSS-0.96% / 76.55%
||
7 Day CHG~0.00%
Published-11 Mar, 2022 | 17:54
Updated-03 Aug, 2024 | 04:42
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.

Action-Not Available
Vendor-NEC Platforms, Ltd.NEC Corporation
Product-univerge_wa2020univerge_wa2611-ap_firmwareuniverge_wa2610-ap_firmwareuniverge_wa1511_firmwareuniverge_wa2611-apuniverge_wa1510_firmwareuniverge_wa1020univerge_wa2612-apuniverge_wa2612-ap_firmwareuniverge_wa2020_firmwareuniverge_wa1510univerge_wa2610-apuniverge_wa1512_firmwareuniverge_wa1512univerge_wa1511univerge_wa2021univerge_wa1020_firmwareuniverge_wa2021_firmwareuniverge_wa2611e-apuniverge_wa2611e-ap_firmwareUNIVERGE DT
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20677
Assigner-JPCERT/CC
ShareView Details
Assigner-JPCERT/CC
CVSS Score-3.1||LOW
EPSS-0.30% / 52.95%
||
7 Day CHG~0.00%
Published-26 Mar, 2021 | 08:50
Updated-03 Aug, 2024 | 17:45
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command.

Action-Not Available
Vendor-NEC Platforms, Ltd.
Product-univerge_aspire_wx_firmwareuniverge_aspire_uxsl2100_firmwareuniverge_sv9100_firmwareuniverge_aspire_wxsl2100univerge_sv9100univerge_aspire_ux_firmwareUNIVERGE Aspire series PBX
CVE-2021-20653
Assigner-JPCERT/CC
ShareView Details
Assigner-JPCERT/CC
CVSS Score-5.3||MEDIUM
EPSS-0.20% / 41.43%
||
7 Day CHG~0.00%
Published-17 Feb, 2021 | 02:05
Updated-03 Aug, 2024 | 17:45
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows remote attackers to bypass access restriction and to obtain unauthorized historical data without access privileges via unspecified vectors.

Action-Not Available
Vendor-NEC Platforms, Ltd.NEC Corporation
Product-csdj-a_firmwarecsdj-dcsdj-bcsdj-acsdj-hcsdj-b_firmwarecsdj-h_firmwarecsdj-d_firmwareCalsos CSDJ
CWE ID-CWE-276
Incorrect Default Permissions
CVE-2018-0613
Assigner-JPCERT/CC
ShareView Details
Assigner-JPCERT/CC
CVSS Score-8.8||HIGH
EPSS-0.31% / 54.12%
||
7 Day CHG~0.00%
Published-26 Jul, 2018 | 17:00
Updated-05 Aug, 2024 | 03:28
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote authenticated attackers to bypass access restriction to conduct arbitrary operations with administrative privilege via unspecified vectors.

Action-Not Available
Vendor-NEC Platforms, Ltd.
Product-calsos_csdj-d_firmwarecalsos_csdj-hcalsos_csdj-a_firmwarecalsos_csdj-bcalsos_csdj-dcalsos_csdx_firmwarecalsos_csdx\(s\)_firmwarecalsos_csdx\(p\)calsos_csdx\(d\)_firmwarecalsos_csdj-h_firmwarecalsos_csdx\(p\)_firmwarecalsos_csdx\(d\)calsos_csdxcalsos_csdx\(s\)calsos_csdj-b_firmwarecalsos_csdj-aCalsos CSDX and CSDJ series products
CWE ID-CWE-269
Improper Privilege Management
CVE-2018-0614
Assigner-JPCERT/CC
ShareView Details
Assigner-JPCERT/CC
CVSS Score-6.1||MEDIUM
EPSS-0.26% / 49.42%
||
7 Day CHG~0.00%
Published-26 Jul, 2018 | 17:00
Updated-05 Aug, 2024 | 03:28
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Action-Not Available
Vendor-NEC Platforms, Ltd.
Product-calsos_csdj-d_firmwarecalsos_csdj-hcalsos_csdj-a_firmwarecalsos_csdj-bcalsos_csdj-dcalsos_csdx_firmwarecalsos_csdx\(s\)_firmwarecalsos_csdx\(p\)calsos_csdx\(d\)_firmwarecalsos_csdj-h_firmwarecalsos_csdx\(p\)_firmwarecalsos_csdx\(d\)calsos_csdxcalsos_csdx\(s\)calsos_csdj-b_firmwarecalsos_csdj-aCalsos CSDX and CSDJ series products
CWE ID-CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')