CVE-2023-39548
HIGH EPSS 50.1%
Published Nov 17, 20232y ago · Modified Jun 17, 20262w ago
8.8 CVSS 3.1
Published Nov 17, 2023 2y ago
Last Modified Jun 17, 2026 2w ago
Description
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
50.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-434 Unrestricted Upload of File with Dangerous Type Resource Mgmt
Affected Products 52
| Vendor | Product | Version | Range |
|---|---|---|---|
| nec | expresscluster_x | 1.0 | any |
| nec | expresscluster_x | 1.0 | any |
| nec | expresscluster_x | 2.0 | any |
| nec | expresscluster_x | 2.0 | any |
| nec | expresscluster_x | 2.1 | any |
| nec | expresscluster_x | 2.1 | any |
| nec | expresscluster_x | 3.0 | any |
| nec | expresscluster_x | 3.0 | any |
| nec | expresscluster_x | 3.1 | any |
| nec | expresscluster_x | 3.1 | any |
| nec | expresscluster_x | 3.2 | any |
| nec | expresscluster_x | 3.2 | any |
| nec | expresscluster_x | 3.3 | any |
| nec | expresscluster_x | 3.3 | any |
| nec | expresscluster_x | 4.0 | any |
| nec | expresscluster_x | 4.0 | any |
| nec | expresscluster_x | 4.1 | any |
| nec | expresscluster_x | 4.1 | any |
| nec | expresscluster_x | 4.2 | any |
| nec | expresscluster_x | 4.2 | any |
| nec | expresscluster_x | 4.3 | any |
| nec | expresscluster_x | 4.3 | any |
| nec | expresscluster_x | 5.0 | any |
| nec | expresscluster_x | 5.0 | any |
| nec | expresscluster_x | 5.1 | any |
| nec | expresscluster_x | 5.1 | any |
| nec | expresscluster_x_singleserversafe | 1.0 | any |
| nec | expresscluster_x_singleserversafe | 1.0 | any |
| nec | expresscluster_x_singleserversafe | 2.0 | any |
| nec | expresscluster_x_singleserversafe | 2.0 | any |
| nec | expresscluster_x_singleserversafe | 2.1 | any |
| nec | expresscluster_x_singleserversafe | 2.1 | any |
| nec | expresscluster_x_singleserversafe | 3.0 | any |
| nec | expresscluster_x_singleserversafe | 3.0 | any |
| nec | expresscluster_x_singleserversafe | 3.1 | any |
| nec | expresscluster_x_singleserversafe | 3.1 | any |
| nec | expresscluster_x_singleserversafe | 3.2 | any |
| nec | expresscluster_x_singleserversafe | 3.2 | any |
| nec | expresscluster_x_singleserversafe | 3.3 | any |
| nec | expresscluster_x_singleserversafe | 3.3 | any |
| nec | expresscluster_x_singleserversafe | 4.0 | any |
| nec | expresscluster_x_singleserversafe | 4.0 | any |
| nec | expresscluster_x_singleserversafe | 4.1 | any |
| nec | expresscluster_x_singleserversafe | 4.1 | any |
| nec | expresscluster_x_singleserversafe | 4.2 | any |
| nec | expresscluster_x_singleserversafe | 4.2 | any |
| nec | expresscluster_x_singleserversafe | 4.3 | any |
| nec | expresscluster_x_singleserversafe | 4.3 | any |
| nec | expresscluster_x_singleserversafe | 5.0 | any |
| nec | expresscluster_x_singleserversafe | 5.0 | any |
| nec | expresscluster_x_singleserversafe | 5.1 | any |
| nec | expresscluster_x_singleserversafe | 5.1 | any |
References 1
- jpn.nec.com https://jpn.nec.com/security-info/secinfo/nv23-009_en.html
Remediation
- jpn.nec.com https://jpn.nec.com/security-info/secinfo/nv23-009_en.html