CVE-2023-3741: NEC Platforms, Ltd ITK-6DGS-1(BK) TEL, инжекция

Описание

Оригинално описание

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

Засегнати продукти

• NEC Platforms, Ltd ITK-6DGS-1(BK) TEL: all versions
• NEC Platforms, Ltd ITK-32LCGS-1(BK) TEL: all versions
• NEC Platforms, Ltd ITK-32TCGS-1(BK) TEL: all versions
• NEC Platforms, Ltd ITK-6D-1(BK)TEL: all versions
• NEC Platforms, Ltd ITK-12D-1(BK)TEL: all versions
• NEC Platforms, Ltd ITK-8LCX-1(BK)TEL: all versions
• NEC Platforms, Ltd ITK-8TCGX-1(BK)TEL: all versions
• NEC Platforms, Ltd ITK-6DGS-1A(BK) TEL: all versions
• NEC Platforms, Ltd ITK-32LCGS-1A(BK) TEL: all versions
• NEC Platforms, Ltd ITK-32TCGS-1A(BK) TEL: all versions
• NEC Platforms, Ltd ITK-6DGS-1P(BK) TEL: all versions
• NEC Platforms, Ltd ITK-32LCGS-1P(BK) TEL: all versions
• NEC Platforms, Ltd ITK-32TCGS-1P(BK) TEL: all versions
• NEC Platforms, Ltd ITK-6D-1P(BK)TEL: all versions
• NEC Platforms, Ltd ITK-12D-1P(BK)TEL: all versions
• NEC Platforms, Ltd ITK-6DG-1P(BK)TEL: all versions
• NEC Platforms, Ltd ITK-12DG-1P(BK)TEL: all versions
• NEC Platforms, Ltd ITK-8LCX-1P(BK)TEL: all versions
• NEC Platforms, Ltd ITK-8LCG-1P(BK)TEL: all versions
• NEC Platforms, Ltd ITK-32LCG-1P(BK)TEL: all versions
• NEC Platforms, Ltd ITK-8TCGX-1P(BK)TEL: all versions
• NEC Platforms, Ltd ITK-32TCG-1P(BK)TEL: all versions

Вид слабост

• CWE-78 Инжектиране на команди към операционната система

История

Други уязвимости в NEC Platforms, Ltd ITK-6DGS-1(BK) TEL

• 9.1CVE-2024-3016

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-3741
• https://nvd.nist.gov/vuln/detail/CVE-2023-3741
• https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html