CVE-2023-39222Not scoredCWE-78

CVE-2023-39222: FURUNO SYSTEMS Co.,Ltd. ACERA 1320 vulnerability

FURUNO SYSTEMS Co.,Ltd. · ACERA 1320

Affected: FURUNO SYSTEMS Co.,Ltd. ACERA 1320 · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.5%probability of exploitation in the next 30 days

74th percentile

050100

Higher than 74% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows: ACERA 1320 firmware ver.01.26 and earlier, ACERA 1310 firmware ver.01.26 and earlier, ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

Affected products14

From the CVE record. A product or version that is not listed is unknown, not unaffected.

FURUNO SYSTEMS Co.,Ltd. · ACERA 1320firmware ver.01.26 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 1310firmware ver.01.26 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 1210firmware ver.02.36 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 1150ifirmware ver.01.35 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 1150wfirmware ver.01.35 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 1110firmware ver.01.76 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 1020firmware ver.01.86 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 1010firmware ver.01.86 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 950firmware ver.01.60 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 850Ffirmware ver.01.60 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 900firmware ver.02.54 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 850Mfirmware ver.02.06 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 810firmware ver.03.74 and earlier
FURUNO SYSTEMS Co.,Ltd. · ACERA 800STfirmware ver.07.35 and earlier

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: OS Command Injection · Command and Code Injection
Vendor: FURUNO SYSTEMS Co.,Ltd.
Published: October 2023
Band: Possible (1 to 10%), October 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-39222 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.