NEC Aterm OS Command Injection Vulnerability

A command injection vulnerability has been identified in the NEC Aterm product line. This vulnerability allows an attacker with administrative access to the device's web console to execute arbitrary operating system commands. The issue is present in the Aterm MR51FN model prior to version 3.4.0 and the CM51FD model prior to version 1.2.0.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of operating system commands with the privileges of the affected device.

Remediation

Users are advised to update to the latest versions. For the MR51FN model, the update information is available on the Aterm support page. CM51FD users can refer to the Aterm CM51FD technical support page for update instructions.