Aterm Gx621A1
Monthly
Cross-site scripting in NEC Aterm router web management interfaces allows an adjacent-network attacker to inject and execute arbitrary JavaScript in the browser of any user who visits the management UI. Nine router models across the Aterm WX, GX, SH, and 19000 series are confirmed affected, with patched firmware versions identified for each. No public exploit identified at time of analysis and EPSS sits at 0.03% (9th percentile), indicating very low observed exploitation pressure; CISA SSVC also assesses exploitation as none.
Cross-site scripting in NEC Aterm router web management interfaces allows an adjacent-network attacker to inject and execute arbitrary JavaScript in the browser of any user who visits the management UI. Nine router models across the Aterm WX, GX, SH, and 19000 series are confirmed affected, with patched firmware versions identified for each. No public exploit identified at time of analysis and EPSS sits at 0.03% (9th percentile), indicating very low observed exploitation pressure; CISA SSVC also assesses exploitation as none.