NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an…
Priority MEDIUM 48CWE-912Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00682 52nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NEC Platforms, Ltd. | ITK-6DGS-1(BK) TEL | v5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-32LCGS-1(BK) TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-32TCGS-1(BK) TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-6D-1(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-12D-1(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-8LCX-1(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-8TCGX-1(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-6DGS-1A(BK) TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-32LCGS-1A(BK) TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-32TCGS-1A(BK) TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-6DGS-1P(BK) TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-32LCGS-1P(BK) TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-32TCGS-1P(BK) TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-6D-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-12D-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-6DG-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-12DG-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-8LCX-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-8LCG-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-32LCG-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-8TCGX-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
| NEC Platforms, Ltd. | ITK-32TCG-1P(BK)TEL | 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 | — | No fix listed | CNA |
- ITK-6DGS-1(BK) TEL VendorNEC Platforms, Ltd. Affected v5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-32LCGS-1(BK) TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-32TCGS-1(BK) TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-6D-1(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-12D-1(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-8LCX-1(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-8TCGX-1(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-6DGS-1A(BK) TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-32LCGS-1A(BK) TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-32TCGS-1A(BK) TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-6DGS-1P(BK) TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-32LCGS-1P(BK) TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-32TCGS-1P(BK) TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-6D-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-12D-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-6DG-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-12DG-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-8LCX-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-8LCG-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-32LCG-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-8TCGX-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
- ITK-32TCG-1P(BK)TEL VendorNEC Platforms, Ltd. Affected 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 Fixed in — No fix listed CNA
CPE names CISA-ADP · 22
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1\/bk_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_6d_1\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_12d_1\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_8lcx_1\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_8tcgx_1\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1a\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1a\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1a\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
- cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1\/bk_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_6d_1\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_12d_1\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_8lcx_1\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_8tcgx_1\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1a\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1a\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1a\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
Show 12 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_6d_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_12d_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_6dg_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_12dg_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_8lcx_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_8lcg_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_32lcg_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_8tcgx_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
| cpe:2.3:a:nec_platforms_ltd:itk_32tcg_1p\/bk\/_tel:*:*:*:*:*:*:*:* | — | — | — |
- cpe:2.3:a:nec_platforms_ltd:itk_6dgs_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_32lcgs_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_32tcgs_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_6d_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_12d_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_6dg_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_12dg_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_8lcx_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_8lcg_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_32lcg_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_8tcgx_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
- cpe:2.3:a:nec_platforms_ltd:itk_32tcg_1p\/bk\/_tel:*:*:*:*:*:*:*:* Versions — — ·—
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-3016
- 2026-10-03 Alias added: GHSA-cv9w-4mcm-4cc2
References
More NEC Platforms, Ltd. vulnerabilities
- TI-2023-03494 OS command injection in NEC Platforms, Ltd. ITK-6DGS-1 TEL CVSS 3.1CRITICAL 9.8
- TI-2022-09210 OS command injection in NEC Platforms, Ltd. UNIVERGE DT CVSS 3.1CRITICAL 9.8
- TI-2026-07601 OS command injection in NEC Platforms, Ltd. Aterm MR51FN CVSS 4.0HIGH 8.5
- TI-2020-04602 OS command injection in NEC Corporation Aterm SA3500G CVSS 3.1HIGH 8.8
- TI-2018-00570 Improper privilege management in NEC Platforms, Ltd. Calsos CSDX and CSDJ series products CVSS 3.0HIGH 8.8
- TI-2026-04024 OS command injection in NEC Platforms, Ltd. Aterm WG2600HS CVSS 4.0HIGH 7.1
Sources
- CVE-2024-3016 · CVE Program
- CVE-2024-3016 · NVD
- FIRST EPSS
- GHSA-cv9w-4mcm-4cc2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences