CVE-2024-3016

Summary

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.

Affected Software

VendorProductVersion RangeStatus
NEC Platforms, LtdITK-6DGS-1(BK) TELv5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-32LCGS-1(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-32TCGS-1(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-6D-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-12D-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-8LCX-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-8TCGX-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-6DGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-32LCGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-32TCGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-6DGS-1P(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-32LCGS-1P(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-32TCGS-1P(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-6D-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-12D-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-6DG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-12DG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-8LCX-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-8LCG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-32LCG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-8TCGX-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected
NEC Platforms, LtdITK-32TCG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20affected

Weaknesses

  • CWE-912: CWE-912: Hidden Functionality

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References