CVE-2024-3016

Published: May 14, 2024Modified: Jun 17, 2026Deferred

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.

Related CWEs

CWE-912

Hidden Functionality

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

References (2)

https://jpn.nec.com/security-info/secinfo/nv24-002_en.html

Source: psirt-info@cyber.jp.nec.com

https://jpn.nec.com/security-info/secinfo/nv24-002_en.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.