CVE-2023-3741
high-risk
Published 2023-11-30
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.
Do I need to act?
-
0.55% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (20)
Itk-6Dgs-1\(Bk\)Tel Firmware
Itk-32Lcgs-1\(Bk\)Tel Firmware
Itk-32Tcgs-1\(Bk\)Tel Firmware
Itk-6D-1\(Bk\)Tel Firmware
Itk-12D-1\(Bk\)Tel Firmware
Itk-8Lcx-1\(Bk\)Tel Firmware
Itk-8Tcgx-1\(Bk\)Tel Firmware
Itk-6Dgs-1A\(Bk\)Tel Firmware
Itk-32Lcgs-1A\(Bk\)Tel Firmware
Itk-32Tcgs-1A\(Bk\)Tel Firmware
Itk-6Dgs-1P\(Bk\)Tel Firmware
Itk-32Lcgs-1P\(Bk\)Tel Firmware
Itk-32Tcgs-1P\(Bk\)Tel Firmware
Itk-6D-1P\(Bk\)Tel Firmware
Itk-12D-1P\(Bk\)Tel Firmware
Itk-6Dg-1P\(Bk\)Tel Firmware
Itk-12Dg-1P\(Bk\)Tel Firmware
Itk-8Lcx-1P\(Bk\)Tel Firmware
Itk-8Lcg-1P\(Bk\)Tel Firmware
Itk-32Lcg-1P\(Bk\)Tel Firmware
Affected Vendors
References (2)
54
/ 100
high-risk
Severity
32/34 · Critical
Exploitability
2/34 · Minimal
Exposure
20/34 · Moderate