{"id":"CVE-2023-3741","aliases":["EUVD-2023-44376","GHSA-56j6-4wv9-3jgh"],"status":"published","title":"An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions...","description":"An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01484,"percentile":0.7417,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2023-11-30T00:55:50Z","modified":"2026-06-17T06:14:44Z","products":[{"vendor":"nec","product":"itk-12d-1\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-12d-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-12dg-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-32lcg-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-32lcgs-1\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-32lcgs-1a\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-32lcgs-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-32tcg-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-32tcgs-1\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-32tcgs-1a\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-32tcgs-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-6d-1\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-6d-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-6dg-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-6dgs-1\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-6dgs-1a\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-6dgs-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-8lcg-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-8lcx-1\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-8lcx-1p\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-8tcgx-1\\(bk\\)tel_firmware"},{"vendor":"nec","product":"itk-8tcgx-1p\\(bk\\)tel_firmware"},{"vendor":"nec platforms, ltd","product":"itk-12d-1(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-12d-1p(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-12dg-1p(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-32lcg-1p(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-32lcgs-1(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-32lcgs-1a(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-32lcgs-1p(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-32tcg-1p(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-32tcgs-1(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-32tcgs-1a(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-32tcgs-1p(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-6d-1(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-6d-1p(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-6dg-1p(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-6dgs-1(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-6dgs-1a(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-6dgs-1p(bk) tel"},{"vendor":"nec platforms, ltd","product":"itk-8lcg-1p(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-8lcx-1(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-8lcx-1p(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-8tcgx-1(bk)tel"},{"vendor":"nec platforms, ltd","product":"itk-8tcgx-1p(bk)tel"}],"references":[{"url":"https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html","tags":["x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3741"},{"url":"https://github.com/advisories/GHSA-56j6-4wv9-3jgh"}],"sources":{"cve":[{"id":"CVE-2023-3741","description":"An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.\n\n","status":"published","published":"2023-11-30T00:55:50.692Z","modified":"2024-12-02T19:03:40.069Z","cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:24.707957Z"}],"euvd":[{"id":"EUVD-2023-44376","description":"An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.\n\n","status":"published","published":"2023-11-30T00:55:50Z","modified":"2024-12-02T19:03:40Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"none"}],"updated_at":"2026-11-03T00:04:43.613884Z"}],"ghsa":[{"id":"GHSA-56j6-4wv9-3jgh","title":"An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions...","description":"An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.\n\n","status":"published","published":"2023-11-30T03:30:30Z","modified":"2023-12-13T05:05:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:55:11.44614Z"}],"nvd":[{"id":"CVE-2023-3741","description":"An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device.\n\n","status":"published","published":"2023-11-30T01:15:07.187Z","modified":"2026-06-17T06:14:44.917Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:08:49.393375Z"}]}}