CVE-2023-3741: OS Command Injection
Published Nov 30, 2023
·Updated
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.
Affected Software
44 affected components
All of the following
NEC Itk-6dgs-1\(bk\)tel Firmware
NEC Itk-6dgs-1\(bk\)tel
All of the following
NEC Itk-32lcgs-1\(bk\)tel Firmware
NEC Itk-32lcgs-1\(bk\)tel
All of the following
NEC Itk-32tcgs-1\(bk\)tel Firmware
NEC Itk-32tcgs-1\(bk\)tel
All of the following
NEC Itk-6d-1\(bk\)tel Firmware
NEC Itk-6d-1\(bk\)tel
All of the following
NEC Itk-12d-1\(bk\)tel Firmware
NEC Itk-12d-1\(bk\)tel
All of the following
NEC Itk-8lcx-1\(bk\)tel Firmware
NEC Itk-8lcx-1\(bk\)tel
All of the following
NEC Itk-8tcgx-1\(bk\)tel Firmware
NEC Itk-8tcgx-1\(bk\)tel
All of the following
NEC Itk-6dgs-1a\(bk\)tel Firmware
NEC Itk-6dgs-1a\(bk\)tel
All of the following
NEC Itk-32lcgs-1a\(bk\)tel Firmware
NEC Itk-32lcgs-1a\(bk\)tel
All of the following
NEC Itk-32tcgs-1a\(bk\)tel Firmware
NEC Itk-32tcgs-1a\(bk\)tel
All of the following
NEC Itk-6dgs-1p\(bk\)tel Firmware
NEC Itk-6dgs-1p\(bk\)tel
All of the following
NEC Itk-32lcgs-1p\(bk\)tel Firmware
NEC Itk-32lcgs-1p\(bk\)tel
All of the following
NEC Itk-32tcgs-1p\(bk\)tel Firmware
NEC Itk-32tcgs-1p\(bk\)tel
All of the following
NEC Itk-6d-1p\(bk\)tel Firmware
NEC Itk-6d-1p\(bk\)tel
All of the following
NEC Itk-12d-1p\(bk\)tel Firmware
NEC Itk-12d-1p\(bk\)tel
All of the following
NEC Itk-6dg-1p\(bk\)tel Firmware
NEC Itk-6dg-1p\(bk\)tel
All of the following
NEC Itk-12dg-1p\(bk\)tel Firmware
NEC Itk-12dg-1p\(bk\)tel
All of the following
NEC Itk-8lcx-1p\(bk\)tel Firmware
NEC Itk-8lcx-1p\(bk\)tel
All of the following
NEC Itk-8lcg-1p\(bk\)tel Firmware
NEC Itk-8lcg-1p\(bk\)tel
All of the following
NEC Itk-32lcg-1p\(bk\)tel Firmware
NEC Itk-32lcg-1p\(bk\)tel
All of the following
NEC Itk-8tcgx-1p\(bk\)tel Firmware
NEC Itk-8tcgx-1p\(bk\)tel
All of the following
NEC Itk-32tcg-1p\(bk\)tel Firmware
NEC Itk-32tcg-1p\(bk\)tel
Event History
Nov 30, 2023
CVE Published
12:55 AM
Data Sourced
12:55 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-3741.
2
What is the severity of CVE-2023-3741?
The severity of CVE-2023-3741 is critical with a severity value of 9.8.
3
Which software versions are affected by CVE-2023-3741?
NEC Platforms DT900 and DT900S Series all versions are affected.
4
How does CVE-2023-3741 allow an attacker to execute commands?
CVE-2023-3741 is an OS command injection vulnerability that allows an attacker to execute any command on the device.
5
How can I fix CVE-2023-3741?
Refer to the provided reference link for more information on how to fix CVE-2023-3741.