CVE-2024-3016: Hidden Functionality

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user...

CVE-2024-3016

The NEC Platforms DT900 and DT900S Series IP desktop phones (versions 5.0.0.0 – v5.3.4.4 and 5.4.0.0 – v5.6.0.20 ) are vulnerable to a Hidden Functionality vulnerability (CWE-912 ). This flaw allows an unauthenticated attacker to access and modify non-documented system settings via the local netw...

CVE-2024-3016

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user...

CVE-2024-3016

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user...

PT-2024-23215 · Nec · Dt900 +1

Name of the Vulnerable Software and Affected Versions: NEC Platforms DT900 and DT900S Series versions 5.0.0.0 through 5.3.4.4 NEC Platforms DT900 and DT900S Series versions 5.4.0.0 through 5.6.0.20 Description: The issue allows an attacker to access non-documented system settings and change them...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

Command injection

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

CVE-2023-3741

The CVE-2023-3741 entry describes an OS command injection vulnerability in NEC Platforms DT900 and DT900S Series IP phones (all versions), allowing an attacker to execute arbitrary commands on the device. According to connected sources, exploitation is possible over the network with no privileges...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

PT-2023-25947 · Nec · Nec Platforms Dt900

Name of the Vulnerable Software and Affected Versions: NEC Platforms DT900 and DT900S Series all versions Description: An OS Command injection issue allows an attacker to execute any command on the device. This issue was found inside the firmware of a NEC telephone. Recommendations: For NEC...

CVE-2023-3741: Improper Neutralization of Special Elements used in an OS Command

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

NEC Platforms DT900 Series and DT900S Series Operating System Command Injection Vulnerability

The NEC Platforms DT900 Series and NEC Platforms DT900S Series are both a series of IP desktop phones from Nippon Electric NEC. A security vulnerability exists in the NEC Platforms DT900 Series and DT900S Series that stems from the presence of an operating system command injection vulnerability...