CVE-2024-3016

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-912

Affected software

VendorProductVersions
NEC Platforms, LtdITK-6DGS-1(BK) TELv5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-32LCGS-1(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-32TCGS-1(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-6D-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-12D-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-8LCX-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-8TCGX-1(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-6DGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-32LCGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-32TCGS-1A(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-6DGS-1P(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-32LCGS-1P(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-32TCGS-1P(BK) TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-6D-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-12D-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-6DG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-12DG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-8LCX-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-8LCG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-32LCG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-8TCGX-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
NEC Platforms, LtdITK-32TCG-1P(BK)TEL5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20
nec_platforms_ltditk_6dgs_1\/bk_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_32lcgs_1\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_32tcgs_1\/bk\/_tel>= 5.0.0.0, <= v5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_6d_1\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_12d_1\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_8lcx_1\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_8tcgx_1\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_6dgs_1a\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_32lcgs_1a\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_32tcgs_1a\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_6dgs_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_32lcgs_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_32tcgs_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_6d_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_12d_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_6dg_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_12dg_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_8lcx_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_8lcg_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_32lcg_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_8tcgx_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, <= 5.6.0.20
nec_platforms_ltditk_32tcg_1p\/bk\/_tel>= 5.0.0.0, <= 5.3.4.4; >= 5.4.0.0, < 5.6.0.20

References

Timeline

Published
May 14, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-301604.8A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with CVE-2024-301616.5In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier andCVE-2024-301627.2Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPS\core\modules\aCVE-2024-301639.8Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\CVE-2024-301646.7Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissioCVE-2024-301657.1Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands wCVE-2024-301669.1In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack CVE-2024-301676.3/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a PCVE-2024-30176.5In a Silicon Labs  multi-protocol gateway, a corrupt pointer to buffered data on a multi-protocol radio co-processor (RCP) causes the OpenCVE-2024-301709.1PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and latCVE-2024-301715.9An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes CVE-2024-301727.5An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a craf
CVE-2024-3016: Critical severity, CVSS 9.1 | Vulnix