Refine your search
2 vulnerabilities found for ITK-8TCGX-1(BK)TEL by NEC Platforms, Ltd
CVE-2024-3016 (GCVE-0-2024-3016)
Vulnerability from cvelistv5
Published
2024-05-09 06:32
Modified
2024-08-22 15:09
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-912 - Hidden Functionality
Summary
NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| NEC Platforms, Ltd | ITK-6DGS-1(BK) TEL |
Version: v5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T19:32:42.637Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://jpn.nec.com/security-info/secinfo/nv24-002_en.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1\\/bk_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_6dgs_1\\/bk_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_32lcgs_1\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_32tcgs_1\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "v5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_6d_1\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_6d_1\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_12d_1\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_12d_1\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_8lcx_1\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_8lcx_1\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_8tcgx_1\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_8tcgx_1\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1a\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_6dgs_1a\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1a\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_32lcgs_1a\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1a\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_32tcgs_1a\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_6dgs_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_32lcgs_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_32tcgs_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_6d_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_6d_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_12d_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_12d_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_6dg_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_6dg_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_12dg_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_12dg_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_8lcx_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_8lcx_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_8lcg_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_8lcg_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_32lcg_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_32lcg_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_8tcgx_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_8tcgx_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:nec_platforms_ltd:itk_32tcg_1p\\/bk\\/_tel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "itk_32tcg_1p\\/bk\\/_tel",
"vendor": "nec_platforms_ltd",
"versions": [
{
"lessThanOrEqual": "5.3.4.4",
"status": "affected",
"version": "5.0.0.0",
"versionType": "custom"
},
{
"lessThan": "5.6.0.20",
"status": "affected",
"version": "5.4.0.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-3016",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-23T19:37:17.784025Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-22T15:09:05.064Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "ITK-6DGS-1(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "v5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-32LCGS-1(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-32TCGS-1(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-6D-1(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-12D-1(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-8LCX-1(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-8TCGX-1(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-6DGS-1A(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-32LCGS-1A(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-32TCGS-1A(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-6DGS-1P(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-32LCGS-1P(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-32TCGS-1P(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-6D-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-12D-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-6DG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-12DG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-8LCX-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-8LCG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-32LCG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-8TCGX-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
},
{
"product": "ITK-32TCG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Mr. Gianluca Altomani and Mr. Manuel Romei."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eNEC Platforms DT900 and DT900S Series 5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.\u003c/p\u003e"
}
],
"value": "NEC Platforms DT900 and DT900S Series 5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.\n\n"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-912",
"description": "CWE-912: Hidden Functionality",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-09T08:06:30.885Z",
"orgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282",
"shortName": "NEC"
},
"references": [
{
"url": "https://jpn.nec.com/security-info/secinfo/nv24-002_en.html"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282",
"assignerShortName": "NEC",
"cveId": "CVE-2024-3016",
"datePublished": "2024-05-09T06:32:39.145Z",
"dateReserved": "2024-03-27T15:15:52.175Z",
"dateUpdated": "2024-08-22T15:09:05.064Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-3741 (GCVE-0-2023-3741)
Vulnerability from cvelistv5
Published
2023-11-30 00:55
Modified
2024-12-02 19:03
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command
Summary
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.
References
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T07:01:57.513Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-3741",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2023-12-04T20:02:20.376614Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-02T19:03:40.069Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "ITK-6DGS-1(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-32LCGS-1(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-32TCGS-1(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-6D-1(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-12D-1(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-8LCX-1(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-8TCGX-1(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-6DGS-1A(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-32LCGS-1A(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-32TCGS-1A(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-6DGS-1P(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-32LCGS-1P(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-32TCGS-1P(BK) TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-6D-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-12D-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-6DG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-12DG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-8LCX-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-8LCG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-32LCG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-8TCGX-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"product": "ITK-32TCG-1P(BK)TEL",
"vendor": "NEC Platforms, Ltd",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Mr. Gianluca Altomani."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.\u003c/p\u003e"
}
],
"value": "An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.\n\n"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-11-30T00:55:52.643Z",
"orgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282",
"shortName": "NEC"
},
"references": [
{
"url": "https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282",
"assignerShortName": "NEC",
"cveId": "CVE-2023-3741",
"datePublished": "2023-11-30T00:55:50.692Z",
"dateReserved": "2023-07-18T00:45:34.513Z",
"dateUpdated": "2024-12-02T19:03:40.069Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}