CVE-2023-42771

Katalog CVE

CVSS 8.8 · High EPSS 0,37%

Kerentanan Improper Authentication pada furunosystems acera 1310 firmware, furunosystems acera 1320 firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration files and/or log files, and upload configuration files and/or firmware. They are affected when running in ST(Standalone) mode.

Rincian

Terbit di NVD

3 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication
CWE-288: Authentication Bypass Using an Alternate Path or Channel

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 29,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.furunosystems.co.jp/news/info/vulner20231002.html advisory vendor
• https://jvn.jp/en/vu/JVNVU94497038/ advisory pihak ketiga