This vulnerability (CVE-2026-4619) affects NEC Platforms, Ltd. Aterm WX3600HP devices running versions before 1.5.3. It is a path traversal issue (CWE-22) that enables an attacker with high privileges to write files outside the intended directory via network access. The CVSS 4.0 vector indicates network attack vector, high attack complexity, no user interaction, and high privileges required. The impact includes potential unauthorized modification of files on the device. No patch or official fix has been documented yet.

An attacker with high privileges can exploit this vulnerability to overwrite arbitrary files on the affected device via network access. This could lead to unauthorized modification of system files or configuration, potentially impacting device integrity and availability. However, exploitation requires high privileges, which limits the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the device to trusted users only and monitor for any unauthorized access attempts. Avoid exposing the device management interface to untrusted networks.