Skip to main content
← All vulnerabilities
CVE-2023-39222

OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows: ACERA 1320 firmware ver.01.26 and earlier, ACERA 1310 firmware ver.01.26 and earlier, ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1320

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1310

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1210

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1150i

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1150w

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1110

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1020

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1010

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 950

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 850F

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 900

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 850M

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 810

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 800ST

    Version range not reported

References 2

furunosystems.co.jp

jvn.jp