CVE-2023-3741

Published: Nov 30, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

Affected (22)

Nec

22 products

Itk 6dgs 1(bk)tel Firmware

Itk 32lcgs 1(bk)tel Firmware

Itk 32tcgs 1(bk)tel Firmware

Itk 6d 1(bk)tel Firmware

Itk 12d 1(bk)tel Firmware

Itk 8lcx 1(bk)tel Firmware

Itk 8tcgx 1(bk)tel Firmware

Itk 6dgs 1a(bk)tel Firmware

Itk 32lcgs 1a(bk)tel Firmware

Itk 32tcgs 1a(bk)tel Firmware

Itk 6dgs 1p(bk)tel Firmware

Itk 32lcgs 1p(bk)tel Firmware

Itk 32tcgs 1p(bk)tel Firmware

Itk 6d 1p(bk)tel Firmware

Itk 12d 1p(bk)tel Firmware

Itk 6dg 1p(bk)tel Firmware

Itk 12dg 1p(bk)tel Firmware

Itk 8lcx 1p(bk)tel Firmware

Itk 8lcg 1p(bk)tel Firmware

Itk 32lcg 1p(bk)tel Firmware

Itk 8tcgx 1p(bk)tel Firmware

Itk 32tcg 1p(bk)tel Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 6dgs 1(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 6dgs 1(bk)tel	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 32lcgs 1(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 32lcgs 1(bk)tel	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 32tcgs 1(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 32tcgs 1(bk)tel	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 6d 1(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 6d 1(bk)tel	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 12d 1(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 12d 1(bk)tel	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 8lcx 1(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 8lcx 1(bk)tel	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 8tcgx 1(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 8tcgx 1(bk)tel	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 6dgs 1a(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 6dgs 1a(bk)tel	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 32lcgs 1a(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 32lcgs 1a(bk)tel	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 32tcgs 1a(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 32tcgs 1a(bk)tel	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 6dgs 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 6dgs 1p(bk)tel	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 32lcgs 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 32lcgs 1p(bk)tel	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 32tcgs 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 32tcgs 1p(bk)tel	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 6d 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 6d 1p(bk)tel	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 12d 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 12d 1p(bk)tel	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 6dg 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 6dg 1p(bk)tel	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 12dg 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 12dg 1p(bk)tel	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 8lcx 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 8lcx 1p(bk)tel	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 8lcg 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 8lcg 1p(bk)tel	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 32lcg 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 32lcg 1p(bk)tel	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 8tcgx 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 8tcgx 1p(bk)tel	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Itk 32tcg 1p(bk)tel Firmware	All versions

Running on/with	Platform Versions
Nec Itk 32tcg 1p(bk)tel	All versions

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html

Source: psirt-info@cyber.jp.nec.com

Broken Link

https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.