What’s Vulnerable › Vulnerabilities

CVE-2023-3741

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-30 · updated 2026-06-17
• Weakness: CWE-78

Description

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

Affected products

• NEC Itk-12D-1(Bk)Tel Firmware: all versions
• NEC Itk-12D-1P(Bk)Tel Firmware: all versions
• NEC Itk-12Dg-1P(Bk)Tel Firmware: all versions
• NEC Itk-32Lcg-1P(Bk)Tel Firmware: all versions
• NEC Itk-32Lcgs-1(Bk)Tel Firmware: all versions
• NEC Itk-32Lcgs-1A(Bk)Tel Firmware: all versions
• NEC Itk-32Lcgs-1P(Bk)Tel Firmware: all versions
• NEC Itk-32Tcg-1P(Bk)Tel Firmware: all versions
• NEC Itk-32Tcgs-1(Bk)Tel Firmware: all versions
• NEC Itk-32Tcgs-1A(Bk)Tel Firmware: all versions
• NEC Itk-32Tcgs-1P(Bk)Tel Firmware: all versions
• NEC Itk-6D-1(Bk)Tel Firmware: all versions
• NEC Itk-6D-1P(Bk)Tel Firmware: all versions
• NEC Itk-6Dg-1P(Bk)Tel Firmware: all versions
• NEC Itk-6Dgs-1(Bk)Tel Firmware: all versions
• NEC Itk-6Dgs-1A(Bk)Tel Firmware: all versions
• NEC Itk-6Dgs-1P(Bk)Tel Firmware: all versions
• NEC Itk-8Lcg-1P(Bk)Tel Firmware: all versions
• NEC Itk-8Lcx-1(Bk)Tel Firmware: all versions
• NEC Itk-8Lcx-1P(Bk)Tel Firmware: all versions
• NEC Itk-8Tcgx-1(Bk)Tel Firmware: all versions
• NEC Itk-8Tcgx-1P(Bk)Tel Firmware: all versions

References

• https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html
• https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html

Get alerted when CVE-2023-3741 or the next vulnerability affects your stack