Aterm W1200Ex Ms CVE-2026-4621

The vulnerability exists in NEC Platforms, Ltd. Aterm series routers, a consumer/small-business wireless networking product line widely deployed across Japanese and Asian markets. The root cause is classified as CWE-912 (Hidden Functionality in Binary Black-Box), indicating that undocumented administrative or debugging telnet functionality exists within firmware but is not exposed through normal configuration interfaces. An attacker with network access can trigger activation of this hidden service without authentication (PR:N per CVSS vector), likely through malformed requests, specific packet sequences, or exploitation of an undocumented configuration parameter. Telnet is an unencrypted remote shell protocol; once enabled, it typically allows full device administration with root or equivalent privileges, making it a high-value post-exploitation target even if the initial enablement attack vector is difficult (AC:H).