CVE-2024-3016 - OpenCVE

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.

CVSS

No CVSS.

Vendors & Products
CPE Configurations

No data.

References

Link	Resource
https://jpn.nec.com/security-info/secinfo/nv24-002_en.html

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: NEC

Published: 2024-05-09T06:32:39.145Z

Updated: 2024-05-09T08:06:30.885Z

Reserved: 2024-03-27T15:15:52.175Z

Link: CVE-2024-3016

JSON object: View

NVD Information

Status : Awaiting Analysis

Published: 2024-05-14T15:39:46.243

Modified: 2024-05-14T16:11:39.510

Link: CVE-2024-3016

JSON object: View

Redhat Information

No data.

CWE

CWE-912

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-3016", "assignerOrgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282", "state": "PUBLISHED", "assignerShortName": "NEC", "dateReserved": "2024-03-27T15:15:52.175Z", "datePublished": "2024-05-09T06:32:39.145Z", "dateUpdated": "2024-05-09T08:06:30.885Z"}, "containers": {"cna": {"affected": [{"product": "ITK-6DGS-1(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "v5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-32LCGS-1(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-32TCGS-1(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-6D-1(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-12D-1(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-8LCX-1(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-8TCGX-1(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-6DGS-1A(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-32LCGS-1A(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-32TCGS-1A(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-6DGS-1P(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-32LCGS-1P(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-32TCGS-1P(BK) TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-6D-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-12D-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-6DG-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-12DG-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-8LCX-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-8LCG-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-32LCG-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-8TCGX-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}, {"product": "ITK-32TCG-1P(BK)TEL", "vendor": "NEC Platforms, Ltd", "versions": [{"status": "affected", "version": "5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20"}]}], "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Mr. Gianluca Altomani and Mr. Manuel Romei."}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>NEC Platforms DT900 and DT900S Series 5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.</p>"}], "value": "NEC Platforms DT900 and DT900S Series 5.0.0.0 \u2013 v5.3.4.4, v5.4.0.0 \u2013 v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.\n\n"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-912", "description": "CWE-912: Hidden Functionality", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f2760a35-e0d8-4637-ac4c-cc1a2de3e282", "shortName": "NEC", "dateUpdated": "2024-05-09T08:06:30.885Z"}, "references": [{"url": "https://jpn.nec.com/security-info/secinfo/nv24-002_en.html"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}}}