Paper/Archive/CVE-2023-3741

CVE-2023-3741

NEC Platforms, Ltd ITK-6DGS-1(BK) TEL — An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on…

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 74.0.740 × 2014.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

Affected

ProductAffectedFixed inSource

ITK-6DGS-1(BK) TELall versions–CNA

ITK-32LCGS-1(BK) TELall versions–CNA

ITK-32TCGS-1(BK) TELall versions–CNA

ITK-6D-1(BK)TELall versions–CNA

ITK-12D-1(BK)TELall versions–CNA

ITK-8LCX-1(BK)TELall versions–CNA

ITK-8TCGX-1(BK)TELall versions–CNA

ITK-6DGS-1A(BK) TELall versions–CNA

ITK-32LCGS-1A(BK) TELall versions–CNA

ITK-32TCGS-1A(BK) TELall versions–CNA

ITK-6DGS-1P(BK) TELall versions–CNA

ITK-32LCGS-1P(BK) TELall versions–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refhttps://jpn.nec.com/security-info/secinfo/nv23-011_en.html