Vulnerability in Nec Platforms, Ltd Itk-12d-1(bk)tel
CVE-2024-3016
NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.
EPSS: 0.007 (48.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Nec Platforms, Ltd Itk-12d-1(bk)tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-12d-1p(bk)tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-12dg-1p(bk)tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-32lcg-1p(bk)tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-32lcgs-1a(bk) Tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-32lcgs-1(bk) Tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-32lcgs-1p(bk) Tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-32tcg-1p(bk)tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-32tcgs-1a(bk) Tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
- Nec Platforms, Ltd Itk-32tcgs-1(bk) Tel — versions 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-3016?
- CVE-2024-3016 is a critical-severity vulnerability in Nec Platforms, Ltd Itk-12d-1(bk)tel, classified under Hidden Functionality. CVSS score: 9.1/10. Published 2024-05-14.
- How severe is CVE-2024-3016?
- Critical severity. CVSS v3 base score is 9.1 out of 10.