Aterm Mr51Fn
Monthly
Authenticated OS command execution in NEC Platforms Aterm MR51FN (before Ver. 3.4.0) and CM51FD (before Ver. 1.2.0) routers lets an attacker who already holds administrator credentials to the web console inject arbitrary operating-system commands over an adjacent network. Impact is total (confidentiality, integrity and availability all High per CVSS 4.0), effectively giving full control of the affected device, but there is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.34%, 57th percentile). Exploitation is gated behind administrator access and adjacent (not internet-wide) reach, so this is a privilege-escalation-to-device-takeover primitive rather than a remote unauthenticated compromise.
Authenticated OS command execution in NEC Platforms Aterm MR51FN (before Ver. 3.4.0) and CM51FD (before Ver. 1.2.0) routers lets an attacker who already holds administrator credentials to the web console inject arbitrary operating-system commands over an adjacent network. Impact is total (confidentiality, integrity and availability all High per CVSS 4.0), effectively giving full control of the affected device, but there is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.34%, 57th percentile). Exploitation is gated behind administrator access and adjacent (not internet-wide) reach, so this is a privilege-escalation-to-device-takeover primitive rather than a remote unauthenticated compromise.