CVE:CVE-2021-44746
CNNVD:CNNVD-202112-1468
Nec Platforms Univerge Dt是日本Nec Platforms公司的一系列桌面电话。
Univerge Dt存在安全漏洞，该漏洞源于在使用IP电话管理器或数据维护工具分析数据包时，可能会获取电话配置信息。以下产品及版本受到影响：UNIVERGE DT800 Series (DT820) ITY-6D-1(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-8LDX-1(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-8LDX-1(BK)TEL (OpEx) V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-8LCGX-1(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-6DG-1A(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-6D-1P(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-6DG-1P(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-8LDX-1P(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-32LDG-1P(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-8LCGX-1P(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-32LCG-1P(BK)TEL V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-6D-1P(BK)TEL for China V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-6DG-1P(BK)TEL for China V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-8LDX-1P(BK)TEL for China V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-32LDG-1P(BK)TEL for China V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-8LCGX-1P(BK)TEL for China V3.2.7.0 and prior, UNIVERGE DT800 Series (DT820) ITY-32LCG-1P(BK)TEL for China V3.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12D-1D(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24D-1D(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-32D-1D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24PA-1D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24PD-1D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12D-2D(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24D-2D(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-32D-2D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24PA-2D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24PD-2D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24DG-2D(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24CG-2D(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24PAG-2D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24PDG-2D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-32DLK-2D(WH)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12D-3(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24D-3(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-8LD-3(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-8LDG-3(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12DG-3(BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12CG-3(BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24D-3A(BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-8LDG-3A(BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24DG-3A(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24CG-3A(BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12D-3P(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24D-3P(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-8LDG-3P(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12DG-3P(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12CG-3P(WH/BK)TEL V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12D-3P(WH/BK)TEL for China V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-24D-3P(WH/BK)TEL for China V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-8LDG-3P(WH/BK)TEL for China V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12DG-3P(WH/BK)TEL for China V5.2.7.0 and prior, UNIVERGE DT800 Series (DT830) ITZ-12CG-3P(WH/BK)TEL for China V5.2.7.0 and prior, UNIVERGE DT900 Series (DT920) ITK-6DG-1D(WH/BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-12DG-1D(WH)TEL(R) V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-32LCG-1D(WH/BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-6D-1(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-12D-1(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-8LCX-1(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-6DG-1A(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-32LCG-1A(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-6D-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-6DG-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-12D-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-12DG-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-8LCX-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-8LCG-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-32LCG-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-6D-1U(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-6DG-1U(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-12D-1U(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT920) ITK-12DG-1U(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-12CG-1D(WH/BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-24CG-1D(WH/BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-32CG-1D(WH)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-32TCG-1D(WH/BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-24CG-1(WH/BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-8TCGX-1(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-24CG-1A(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-32TCG-1A(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-24CG-1P(WH/BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-8TCGX-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-32TCGX-1P(BK)TEL V2.4.0.0 and prior, UNIVERGE DT900 Series (DT930) ITK-24CG-1U(WH/BK)TEL V2.4.0.0 and prior, PC Tool IP Phone Manager V8.9.1 and prior, PC tool Data Maintenance Tool for DT800 Series V4.2.0.0 and prior, PC tool Data Maintenance Tool for DT900 Series V5.3.0.0 and prior。
solution:Upgrade nec univerge_dt830_firmware to a higher version than 5.2.7.0,and avoid the version (,5.2.7.0]; Upgrade nec univerge_dt820_firmware to a higher version than 3.2.7.0,and avoid the version (,3.2.7.0]; Upgrade nec univerge_dt930_firmware to a higher version than 2.4.0.0,and avoid the version (,2.4.0.0]; Upgrade nec univerge_dt900_data_maintenance_tool to a higher version than 5.3.0.0,and avoid the version (,5.3.0.0]; Upgrade nec univerge_dt800_data_maintenance_tool to a higher version than 4.2.0.0,and avoid the version (,4.2.0.0]; Upgrade nec univerge_ip_phone_manager to a higher version than 8.9.1,and avoid the version (,8.9.1]