CVE-2023-39222 - CVE House
Back to Database
Status published Unknown CVE-2023-39222

OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access...

Vulnerability Description

OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows: ACERA 1320 firmware ver.01.26 and earlier, ACERA 1310 firmware ver.01.26 and earlier, ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-39222

Credits & Attribution

No credits recorded in the NVD database.

References

More from FURUNO SYSTEMS Co.,Ltd.

View All →
CVE-2024-28744
The password is empty in the initial configuration of ACERA...
Unknown 0
CVE-2023-43627
Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier,...
Unknown 0
CVE-2023-42771
Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier,...
Unknown 0
CVE-2023-41086
Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless...
Unknown 0
CVE-2023-39429
Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point...
Unknown 0

Affected Vendor

FURUNO SYSTEMS Co.,Ltd.

View all reports →

Affected Software

ACERA 1320, ACERA 1310, ACERA 1210, ACERA 1150i, ACERA 1150w, ACERA 1110, ACERA 1020, ACERA 1010, ACERA 950, ACERA 850F, ACERA 900, ACERA 850M, ACERA 810, ACERA 800ST
Vulnerable Versions:
firmware ver.01.26 and earlier, firmware ver.02.36 and earlier, firmware ver.01.35 and earlier, firmware ver.01.76 and earlier, firmware ver.01.86 and earlier, firmware ver.01.60 and earlier, firmware ver.02.54 and earlier, firmware ver.02.06 and earlier, firmware ver.03.74 and earlier, firmware ver.07.35 and earlier

Timeline

Official Publish: October 3rd, 2023
Last Modified: September 20th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.