CVE-2024-3016

Description

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.

References

Link	Tags
https://jpn.nec.com/security-info/secinfo/nv24-002_en.html

Frequently Asked Questions

What is the severity of CVE-2024-3016?: CVE-2024-3016 has been scored as a critical severity vulnerability.
How to fix CVE-2024-3016?: To fix CVE-2024-3016, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-3016 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-3016 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-3016?: CVE-2024-3016 affects NEC Platforms, Ltd ITK-6DGS-1(BK) TEL, NEC Platforms, Ltd ITK-32LCGS-1(BK) TEL, NEC Platforms, Ltd ITK-32TCGS-1(BK) TEL, NEC Platforms, Ltd ITK-6D-1(BK)TEL, NEC Platforms, Ltd ITK-12D-1(BK)TEL, NEC Platforms, Ltd ITK-8LCX-1(BK)TEL, NEC Platforms, Ltd ITK-8TCGX-1(BK)TEL, NEC Platforms, Ltd ITK-6DGS-1A(BK) TEL, NEC Platforms, Ltd ITK-32LCGS-1A(BK) TEL, NEC Platforms, Ltd ITK-32TCGS-1A(BK) TEL, NEC Platforms, Ltd ITK-6DGS-1P(BK) TEL, NEC Platforms, Ltd ITK-32LCGS-1P(BK) TEL, NEC Platforms, Ltd ITK-32TCGS-1P(BK) TEL, NEC Platforms, Ltd ITK-6D-1P(BK)TEL, NEC Platforms, Ltd ITK-12D-1P(BK)TEL, NEC Platforms, Ltd ITK-6DG-1P(BK)TEL, NEC Platforms, Ltd ITK-12DG-1P(BK)TEL, NEC Platforms, Ltd ITK-8LCX-1P(BK)TEL, NEC Platforms, Ltd ITK-8LCG-1P(BK)TEL, NEC Platforms, Ltd ITK-32LCG-1P(BK)TEL, NEC Platforms, Ltd ITK-8TCGX-1P(BK)TEL, NEC Platforms, Ltd ITK-32TCG-1P(BK)TEL.

Description

Category

CWE-912 – Hidden Functionality

References

Frequently Asked Questions