What’s Vulnerable › Vulnerabilities
CVE-2024-3016
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-05-14 · updated 2026-06-17
- Weakness: CWE-912
Description
NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.
Affected products
- NEC Platforms, Ltd Itk 12D 1/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 12D 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 12Dg 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 32Lcg 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 32Lcgs 1/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 32Lcgs 1A/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 32Lcgs 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 32Tcg 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 before 5.6.0.20 — fixed in 5.6.0.20
- NEC Platforms, Ltd Itk 32Tcgs 1/Bk/ Tel: from 5.0.0.0 through v5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 32Tcgs 1A/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 32Tcgs 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 6D 1/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 6D 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 6Dg 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 6Dgs 1/Bk Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 6Dgs 1A/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 6Dgs 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 8Lcg 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 8Lcx 1/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 8Lcx 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 8Tcgx 1/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
- NEC Platforms, Ltd Itk 8Tcgx 1P/Bk/ Tel: from 5.0.0.0 through 5.3.4.4; from 5.4.0.0 through 5.6.0.20
How to fix
Upgrade to a fixed version: NEC Platforms, Ltd Itk 32Tcg 1P/Bk/ Tel 5.6.0.20. Check the vendor advisory for mitigations.
References
- https://jpn.nec.com/security-info/secinfo/nv24-002_en.html
- https://jpn.nec.com/security-info/secinfo/nv24-002_en.html
Get alerted when CVE-2024-3016 or the next vulnerability affects your stack