A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-241027.
References
| Link | Resource |
|---|---|
| https://github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/SATO%20CL4NX-J%20Plus/README.md | Third Party Advisory |
| https://vuldb.com/?ctiid.241027 | Third Party Advisory |
| https://vuldb.com/?id.241027 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
04 Oct 2023, 14:26
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:sato:cl4nx-j_plus:-:*:*:*:*:*:*:* cpe:2.3:o:sato:cl4nx-j_plus_firmware:1.13.2-u455_r2:*:*:*:*:*:*:* |
|
| First Time |
Sato
Sato cl4nx-j Plus Sato cl4nx-j Plus Firmware |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | (MISC) https://vuldb.com/?ctiid.241027 - Third Party Advisory | |
| References | (MISC) https://github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/SATO%20CL4NX-J%20Plus/README.md - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.241027 - Third Party Advisory |
01 Oct 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-01 23:15
Updated : 2024-04-11 01:22
NVD link : CVE-2023-5326
Mitre link : CVE-2023-5326
CVE.ORG link : CVE-2023-5326
JSON object : View
Products Affected
sato
- cl4nx-j_plus_firmware
- cl4nx-j_plus
CWE
CWE-287
Improper Authentication