CVE-2025-0356

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WX1500HP versions 1.4.2 and earlier NEC Corporation Aterm WX3600HP versions 1.5.3 and earlier

Description The issue allows an attacker to execute arbitrary OS commands via the network. This can be done through the internet, potentially affecting a wide range of devices.

Recommendations For NEC Corporation Aterm WX1500HP versions 1.4.2 and earlier, update to a version later than 1.4.2 to resolve the issue. For NEC Corporation Aterm WX3600HP versions 1.5.3 and earlier, update to a version later than 1.5.3 to resolve the issue. As a temporary workaround, consider restricting network access to the devices until a patch is available.