CVE-2023-41086 - CVE House
Back to Database
Status published Unknown CVE-2023-41086

Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless...

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-41086

Credits & Attribution

No credits recorded in the NVD database.

References

More from FURUNO SYSTEMS Co.,Ltd.

View All →
CVE-2024-28744
The password is empty in the initial configuration of ACERA...
Unknown 0
CVE-2023-43627
Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier,...
Unknown 0
CVE-2023-42771
Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier,...
Unknown 0
CVE-2023-39429
Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point...
Unknown 0
CVE-2023-39222
OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access...
Unknown 0

Affected Vendor

FURUNO SYSTEMS Co.,Ltd.

View all reports →

Affected Software

ACERA 1210, ACERA 1150i, ACERA 1150w, ACERA 1110, ACERA 1020, ACERA 1010, ACERA 950, ACERA 850F, ACERA 900, ACERA 850M, ACERA 810, ACERA 800ST
Vulnerable Versions:
firmware ver.02.36 and earlier, firmware ver.01.35 and earlier, firmware ver.01.76 and earlier, firmware ver.01.86 and earlier, firmware ver.01.60 and earlier, firmware ver.02.54 and earlier, firmware ver.02.06 and earlier, firmware ver.03.74 and earlier, firmware ver.07.35 and earlier

Timeline

Official Publish: October 3rd, 2023
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.