CVE-2024-3016

State: Published
Severity: 9.1 Critical
Published: May 9, 2024
Updated: Aug 22, 2024
Reserved: Mar 27, 2024

Description

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	CISA-ADP

Weaknesses

CWE-912 Hidden Functionality

Affected Products

Product	Versions
ITK-6DGS-1(BK) TELNEC Platforms, Ltd	v5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-32LCGS-1(BK) TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-32TCGS-1(BK) TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-6D-1(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-12D-1(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-8LCX-1(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-8TCGX-1(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-6DGS-1A(BK) TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-32LCGS-1A(BK) TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-32TCGS-1A(BK) TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-6DGS-1P(BK) TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-32LCGS-1P(BK) TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-32TCGS-1P(BK) TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-6D-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-12D-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-6DG-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-12DG-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-8LCX-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-8LCG-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-32LCG-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-8TCGX-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected
ITK-32TCG-1P(BK)TELNEC Platforms, Ltd	5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20Affected

References

https://jpn.nec.com/security-info/secinfo/nv24-002_en.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.