Lucene search

NECCVE-2023-3741

HistoryNov 30, 2023 - 1:15 a.m.

CVE-2023-3741

2023-11-3001:15:07

CWE-78

NEC

web.nvd.nist.gov

cve-2023-3741

os command injection

nec platforms

dt900

dt900s

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

Affected configurations

Nvd

Node

necitk-6dgs-1\(bk\)telMatch-

AND

necitk-6dgs-1\(bk\)tel_firmwareMatch-

Node

necitk-32lcgs-1\(bk\)telMatch-

AND

necitk-32lcgs-1\(bk\)tel_firmwareMatch-

Node

necitk-32tcgs-1\(bk\)telMatch-

AND

necitk-32tcgs-1\(bk\)tel_firmwareMatch-

Node

necitk-6d-1\(bk\)telMatch-

AND

necitk-6d-1\(bk\)tel_firmwareMatch-

Node

necitk-12d-1\(bk\)telMatch-

AND

necitk-12d-1\(bk\)tel_firmwareMatch-

Node

necitk-8lcx-1\(bk\)telMatch-

AND

necitk-8lcx-1\(bk\)tel_firmwareMatch-

Node

necitk-8tcgx-1\(bk\)telMatch-

AND

necitk-8tcgx-1\(bk\)tel_firmwareMatch-

Node

necitk-6dgs-1a\(bk\)telMatch-

AND

necitk-6dgs-1a\(bk\)tel_firmwareMatch-

Node

necitk-32lcgs-1a\(bk\)tel_firmwareMatch-

AND

necitk-32lcgs-1a\(bk\)telMatch-

Node

necitk-32tcgs-1a\(bk\)tel_firmwareMatch-

AND

necitk-32tcgs-1a\(bk\)telMatch-

Node

necitk-6dgs-1p\(bk\)tel_firmwareMatch-

AND

necitk-6dgs-1p\(bk\)telMatch-

Node

necitk-32lcgs-1p\(bk\)tel_firmwareMatch-

AND

necitk-32lcgs-1p\(bk\)telMatch-

Node

necitk-32tcgs-1p\(bk\)tel_firmwareMatch-

AND

necitk-32tcgs-1p\(bk\)telMatch-

Node

necitk-6d-1p\(bk\)tel_firmwareMatch-

AND

necitk-6d-1p\(bk\)telMatch-

Node

necitk-12d-1p\(bk\)tel_firmwareMatch-

AND

necitk-12d-1p\(bk\)telMatch-

Node

necitk-6dg-1p\(bk\)tel_firmwareMatch-

AND

necitk-6dg-1p\(bk\)telMatch-

Node

necitk-12dg-1p\(bk\)tel_firmwareMatch-

AND

necitk-12dg-1p\(bk\)telMatch-

Node

necitk-8lcx-1p\(bk\)tel_firmwareMatch-

AND

necitk-8lcx-1p\(bk\)telMatch-

Node

necitk-8lcg-1p\(bk\)tel_firmwareMatch-

AND

necitk-8lcg-1p\(bk\)telMatch-

Node

necitk-32lcg-1p\(bk\)tel_firmwareMatch-

AND

necitk-32lcg-1p\(bk\)telMatch-

Node

necitk-8tcgx-1p\(bk\)tel_firmwareMatch-

AND

necitk-8tcgx-1p\(bk\)telMatch-

Node

necitk-32tcg-1p\(bk\)tel_firmwareMatch-

AND

necitk-32tcg-1p\(bk\)telMatch-

VendorProductVersionCPE
necitk-6dgs-1\(bk\)tel-cpe:2.3:h:nec:itk-6dgs-1\(bk\)tel:-:*:*:*:*:*:*:*
necitk-6dgs-1\(bk\)tel_firmware-cpe:2.3:o:nec:itk-6dgs-1\(bk\)tel_firmware:-:*:*:*:*:*:*:*
necitk-32lcgs-1\(bk\)tel-cpe:2.3:h:nec:itk-32lcgs-1\(bk\)tel:-:*:*:*:*:*:*:*
necitk-32lcgs-1\(bk\)tel_firmware-cpe:2.3:o:nec:itk-32lcgs-1\(bk\)tel_firmware:-:*:*:*:*:*:*:*
necitk-32tcgs-1\(bk\)tel-cpe:2.3:h:nec:itk-32tcgs-1\(bk\)tel:-:*:*:*:*:*:*:*
necitk-32tcgs-1\(bk\)tel_firmware-cpe:2.3:o:nec:itk-32tcgs-1\(bk\)tel_firmware:-:*:*:*:*:*:*:*
necitk-6d-1\(bk\)tel-cpe:2.3:h:nec:itk-6d-1\(bk\)tel:-:*:*:*:*:*:*:*
necitk-6d-1\(bk\)tel_firmware-cpe:2.3:o:nec:itk-6d-1\(bk\)tel_firmware:-:*:*:*:*:*:*:*
necitk-12d-1\(bk\)tel-cpe:2.3:h:nec:itk-12d-1\(bk\)tel:-:*:*:*:*:*:*:*
necitk-12d-1\(bk\)tel_firmware-cpe:2.3:o:nec:itk-12d-1\(bk\)tel_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nec	itk-6dgs-1\(bk\)tel	-	cpe:2.3:h:nec:itk-6dgs-1\(bk\)tel:-:::::::*
nec	itk-6dgs-1\(bk\)tel_firmware	-	cpe:2.3:o:nec:itk-6dgs-1\(bk\)tel_firmware:-:::::::*
nec	itk-32lcgs-1\(bk\)tel	-	cpe:2.3:h:nec:itk-32lcgs-1\(bk\)tel:-:::::::*
nec	itk-32lcgs-1\(bk\)tel_firmware	-	cpe:2.3:o:nec:itk-32lcgs-1\(bk\)tel_firmware:-:::::::*
nec	itk-32tcgs-1\(bk\)tel	-	cpe:2.3:h:nec:itk-32tcgs-1\(bk\)tel:-:::::::*
nec	itk-32tcgs-1\(bk\)tel_firmware	-	cpe:2.3:o:nec:itk-32tcgs-1\(bk\)tel_firmware:-:::::::*
nec	itk-6d-1\(bk\)tel	-	cpe:2.3:h:nec:itk-6d-1\(bk\)tel:-:::::::*
nec	itk-6d-1\(bk\)tel_firmware	-	cpe:2.3:o:nec:itk-6d-1\(bk\)tel_firmware:-:::::::*
nec	itk-12d-1\(bk\)tel	-	cpe:2.3:h:nec:itk-12d-1\(bk\)tel:-:::::::*
nec	itk-12d-1\(bk\)tel_firmware	-	cpe:2.3:o:nec:itk-12d-1\(bk\)tel_firmware:-:::::::*

Rows per page:

1-10 of 441

CNA Affected

[
  {
    "product": "ITK-6DGS-1(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-32LCGS-1(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-32TCGS-1(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-6D-1(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-12D-1(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-8LCX-1(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-8TCGX-1(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-6DGS-1A(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-32LCGS-1A(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-32TCGS-1A(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-6DGS-1P(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-32LCGS-1P(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-32TCGS-1P(BK) TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-6D-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-12D-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-6DG-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-12DG-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-8LCX-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-8LCG-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-32LCG-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-8TCGX-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "product": "ITK-32TCG-1P(BK)TEL",
    "vendor": "NEC Platforms, Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

References

https://jpn.nec.com/security-info/secinfo/nv23-011_en.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

Related for CVE-2023-3741