CVE-2023-3741

Description

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.

References

Link	Tags
https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html	broken link

Frequently Asked Questions

What is the severity of CVE-2023-3741?: CVE-2023-3741 has been scored as a critical severity vulnerability.
How to fix CVE-2023-3741?: To fix CVE-2023-3741, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-3741 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-3741 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-3741?: CVE-2023-3741 affects NEC Platforms, Ltd ITK-6DGS-1(BK) TEL, NEC Platforms, Ltd ITK-32LCGS-1(BK) TEL, NEC Platforms, Ltd ITK-32TCGS-1(BK) TEL, NEC Platforms, Ltd ITK-6D-1(BK)TEL, NEC Platforms, Ltd ITK-12D-1(BK)TEL, NEC Platforms, Ltd ITK-8LCX-1(BK)TEL, NEC Platforms, Ltd ITK-8TCGX-1(BK)TEL, NEC Platforms, Ltd ITK-6DGS-1A(BK) TEL, NEC Platforms, Ltd ITK-32LCGS-1A(BK) TEL, NEC Platforms, Ltd ITK-32TCGS-1A(BK) TEL, NEC Platforms, Ltd ITK-6DGS-1P(BK) TEL, NEC Platforms, Ltd ITK-32LCGS-1P(BK) TEL, NEC Platforms, Ltd ITK-32TCGS-1P(BK) TEL, NEC Platforms, Ltd ITK-6D-1P(BK)TEL, NEC Platforms, Ltd ITK-12D-1P(BK)TEL, NEC Platforms, Ltd ITK-6DG-1P(BK)TEL, NEC Platforms, Ltd ITK-12DG-1P(BK)TEL, NEC Platforms, Ltd ITK-8LCX-1P(BK)TEL, NEC Platforms, Ltd ITK-8LCG-1P(BK)TEL, NEC Platforms, Ltd ITK-32LCG-1P(BK)TEL, NEC Platforms, Ltd ITK-8TCGX-1P(BK)TEL, NEC Platforms, Ltd ITK-32TCG-1P(BK)TEL.

Description

Category

CWE-78 – Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References

Frequently Asked Questions