CVE-2023-39429 - CVE House
Back to Database
Status published Unknown CVE-2023-39429

Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point...

Vulnerability Description

Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary script via a crafted configuration. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-39429

Credits & Attribution

No credits recorded in the NVD database.

References

More from FURUNO SYSTEMS Co.,Ltd.

View All →
CVE-2024-28744
The password is empty in the initial configuration of ACERA...
Unknown 0
CVE-2023-43627
Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier,...
Unknown 0
CVE-2023-42771
Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier,...
Unknown 0
CVE-2023-41086
Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless...
Unknown 0
CVE-2023-39222
OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access...
Unknown 0

Affected Vendor

FURUNO SYSTEMS Co.,Ltd.

View all reports →

Affected Software

ACERA 1210, ACERA 1150i, ACERA 1150w, ACERA 1110, ACERA 1020, ACERA 1010, ACERA 950, ACERA 850F, ACERA 900, ACERA 850M, ACERA 810, ACERA 800ST
Vulnerable Versions:
firmware ver.02.36 and earlier, firmware ver.01.35 and earlier, firmware ver.01.76 and earlier, firmware ver.01.86 and earlier, firmware ver.01.60 and earlier, firmware ver.02.54 and earlier, firmware ver.02.06 and earlier, firmware ver.03.74 and earlier, firmware ver.07.35 and earlier

Timeline

Official Publish: October 3rd, 2023
Last Modified: September 20th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.