CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-3741
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.
Severity
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nec:itk-12d-1\(bk\)tel_firmware
- nec:itk-12d-1p\(bk\)tel_firmware
- nec:itk-12dg-1p\(bk\)tel_firmware
- nec:itk-32lcg-1p\(bk\)tel_firmware
- nec:itk-32lcgs-1\(bk\)tel_firmware
- nec:itk-32lcgs-1a\(bk\)tel_firmware
- nec:itk-32lcgs-1p\(bk\)tel_firmware
- nec:itk-32tcg-1p\(bk\)tel_firmware
- nec:itk-32tcgs-1\(bk\)tel_firmware
- nec:itk-32tcgs-1a\(bk\)tel_firmware
- nec:itk-32tcgs-1p\(bk\)tel_firmware
- nec:itk-6d-1\(bk\)tel_firmware
- nec:itk-6d-1p\(bk\)tel_firmware
- nec:itk-6dg-1p\(bk\)tel_firmware
- nec:itk-6dgs-1\(bk\)tel_firmware
- nec:itk-6dgs-1a\(bk\)tel_firmware
- nec:itk-6dgs-1p\(bk\)tel_firmware
- nec:itk-8lcg-1p\(bk\)tel_firmware
- nec:itk-8lcx-1\(bk\)tel_firmware
- nec:itk-8lcx-1p\(bk\)tel_firmware
- nec:itk-8tcgx-1\(bk\)tel_firmware
- nec:itk-8tcgx-1p\(bk\)tel_firmware