CVEvulnerability

CVE-2023-39547

8.8 HIGH Published 2023-11-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-294

Description

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

Affected configurations

• nec expresscluster x 1.0 • nec expresscluster x 2.0 • nec expresscluster x 2.1 • nec expresscluster x 3.0 • nec expresscluster x 3.1 • nec expresscluster x 3.2 • nec expresscluster x 3.3 • nec expresscluster x 4.0 • nec expresscluster x 4.1 • nec expresscluster x 4.2 • nec expresscluster x 4.3 • nec expresscluster x 5.0 • nec expresscluster x singleserversafe 1.0 • nec expresscluster x singleserversafe 2.0 • nec expresscluster x singleserversafe 2.1 • nec expresscluster x singleserversafe 3.0 • nec expresscluster x singleserversafe 3.1 • nec expresscluster x singleserversafe 3.2 • nec expresscluster x singleserversafe 3.3 • nec expresscluster x singleserversafe 4.0 • nec expresscluster x singleserversafe 4.1 • nec expresscluster x singleserversafe 4.2 • nec expresscluster x singleserversafe 4.3 • nec expresscluster x singleserversafe 5.0

Related

Weakness · CWE (1)

  • CWE-294 Authentication Bypass by Capture-replay weakness

References