by Kastro
Paper/Archive/CVE-2024-3016

CVE-2024-3016

NEC Platforms, Ltd ITK-6DGS-1(BK) TEL — NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system s…

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 52.5.525 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.

Affected

ProductAffectedFixed inSource
ITK-6DGS-1(BK) TELv5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-32LCGS-1(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-32TCGS-1(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-6D-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-12D-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-8LCX-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-8TCGX-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-6DGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-32LCGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-32TCGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-6DGS-1P(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA
ITK-32LCGS-1P(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refjpn.nec.com/security-info/secinfo/nv24-002_en.html