CVEvulnerability

CVE-2023-3741

9.8 CRITICAL Published 2023-11-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

Affected configurations

• nec itk-6dgs-1\(bk\)tel firmware • nec itk-32lcgs-1\(bk\)tel firmware • nec itk-32tcgs-1\(bk\)tel firmware • nec itk-6d-1\(bk\)tel firmware • nec itk-12d-1\(bk\)tel firmware • nec itk-8lcx-1\(bk\)tel firmware • nec itk-8tcgx-1\(bk\)tel firmware • nec itk-6dgs-1a\(bk\)tel firmware • nec itk-32lcgs-1a\(bk\)tel firmware • nec itk-32tcgs-1a\(bk\)tel firmware • nec itk-6dgs-1p\(bk\)tel firmware • nec itk-32lcgs-1p\(bk\)tel firmware • nec itk-32tcgs-1p\(bk\)tel firmware • nec itk-6d-1p\(bk\)tel firmware • nec itk-12d-1p\(bk\)tel firmware • nec itk-6dg-1p\(bk\)tel firmware • nec itk-12dg-1p\(bk\)tel firmware • nec itk-8lcx-1p\(bk\)tel firmware • nec itk-8lcg-1p\(bk\)tel firmware • nec itk-32lcg-1p\(bk\)tel firmware • nec itk-8tcgx-1p\(bk\)tel firmware • nec itk-32tcg-1p\(bk\)tel firmware

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References