A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-241027.
References
| Link | Resource |
|---|---|
| https://github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/SATO%20CL4NX-J%20Plus/README.md | Third Party Advisory |
| https://vuldb.com/?ctiid.241027 | Third Party Advisory |
| https://vuldb.com/?id.241027 | Third Party Advisory |
| https://github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/SATO%20CL4NX-J%20Plus/README.md | Third Party Advisory |
| https://vuldb.com/?ctiid.241027 | Third Party Advisory |
| https://vuldb.com/?id.241027 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 08:41
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.8
v3 : 6.3 |
| References | () https://github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/SATO%20CL4NX-J%20Plus/README.md - Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.241027 - Third Party Advisory | |
| References | () https://vuldb.com/?id.241027 - Third Party Advisory |
29 Feb 2024, 01:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-01 23:15
Updated : 2024-11-21 08:41
NVD link : CVE-2023-5326
Mitre link : CVE-2023-5326
CVE.ORG link : CVE-2023-5326
JSON object : View
Products Affected
sato
- cl4nx-j_plus_firmware
- cl4nx-j_plus
CWE
CWE-287
Improper Authentication