NEC Aterm Series Missing Authorization Vulnerability Allowing Unauthorized Access to Device Information and Settings

A missing authorization vulnerability has been identified in NEC Aterm series devices. This vulnerability allows an attacker to access specific device information and modify settings remotely. It affects multiple models within the Aterm series, all versions, as well as certain models prior to specific version releases.

Impact

Exploitation of this vulnerability could lead to unauthorized access to device information and settings, allowing for unauthorized configuration changes.

Remediation

The remediation process varies by model. Users should refer to the NEC Aterm support pages for their specific model for guidance on addressing this vulnerability.