CVE-2023-3741

CRITICAL

NEC DT900 and DT900S Series - OS Command Injection

Title source: llm
STIX 2.1

Description

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0150
EPSS Percentile 70.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-78
Status published
Products (22)
nec/itk-12d-1\(bk\)tel_firmware
nec/itk-12d-1p\(bk\)tel_firmware
nec/itk-12dg-1p\(bk\)tel_firmware
nec/itk-32lcg-1p\(bk\)tel_firmware
nec/itk-32lcgs-1\(bk\)tel_firmware
nec/itk-32lcgs-1a\(bk\)tel_firmware
nec/itk-32lcgs-1p\(bk\)tel_firmware
nec/itk-32tcg-1p\(bk\)tel_firmware
nec/itk-32tcgs-1\(bk\)tel_firmware
nec/itk-32tcgs-1a\(bk\)tel_firmware
... and 12 more
Published Nov 30, 2023
Tracked Since Feb 18, 2026