Skip to main content
← All vulnerabilities
CVE-2023-39429

Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary s

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary script via a crafted configuration. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1210

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1150i

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1150w

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1110

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1020

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 1010

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 950

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 850F

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 900

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 850M

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 810

    Version range not reported

  • FURUNO SYSTEMS Co.,Ltd. ACERA 800ST

    Version range not reported

References 2

furunosystems.co.jp

jvn.jp