Lucene search

JpcertCVE-2023-38555

HistoryJul 26, 2023 - 8:15 a.m.

CVE-2023-38555

2023-07-2608:15:10

CWE-287

jpcert

web.nvd.nist.gov

cve-2023-38555

fujitsu

network devices

si-r series

sr-m series

authentication bypass

vulnerability

nvd

configuration settings

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

27.2%

JSON

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.

Affected configurations

Nvd

Vulners

Node

fujitsusi-r_30b_firmware

AND

fujitsusi-r_30bMatch-

Node

fujitsusi-r_130b_firmware

AND

fujitsusi-r_130bMatch-

Node

fujitsusi-r_90brin_firmware

AND

fujitsusi-r_90brinMatch-

Node

fujitsusi-r570b_firmware

AND

fujitsusi-r570bMatch-

Node

fujitsusi-r370b_firmware

AND

fujitsusi-r370bMatch-

Node

fujitsusi-r220d_firmware

AND

fujitsusi-r220dMatch-

Node

fujitsusi-r_g100_firmwareRange≤02.54

AND

fujitsusi-r_g100Match-

Node

fujitsusi-r_g200_firmwareRange≤02.54

AND

fujitsusi-r_g200Match-

Node

fujitsusi-r_g100b_firmwareRange≤04.12

AND

fujitsusi-r_g100bMatch-

Node

fujitsusi-r_g110b_firmwareRange≤04.12

AND

fujitsusi-r_g110bMatch-

Node

fujitsusi-r_g200b_firmwareRange≤04.12

AND

fujitsusi-r_g200bMatch-

Node

fujitsusi-r_g210_firmwareRange≤20.52

AND

fujitsusi-r_g210Match-

Node

fujitsusi-r_g211_firmwareRange≤20.52

AND

fujitsusi-r_g211Match-

Node

fujitsusi-r_g120_firmwareRange≤20.52

AND

fujitsusi-r_g120Match-

Node

fujitsusi-r_g121_firmwareRange≤20.52

AND

fujitsusi-r_g121Match-

Node

fujitsusr-m_50ap1_firmware

AND

fujitsusr-m_50ap1Match-

VendorProductVersionCPE
fujitsusi-r_30b_firmware*cpe:2.3:o:fujitsu:si-r_30b_firmware:*:*:*:*:*:*:*:*
fujitsusi-r_30b-cpe:2.3:h:fujitsu:si-r_30b:-:*:*:*:*:*:*:*
fujitsusi-r_130b_firmware*cpe:2.3:o:fujitsu:si-r_130b_firmware:*:*:*:*:*:*:*:*
fujitsusi-r_130b-cpe:2.3:h:fujitsu:si-r_130b:-:*:*:*:*:*:*:*
fujitsusi-r_90brin_firmware*cpe:2.3:o:fujitsu:si-r_90brin_firmware:*:*:*:*:*:*:*:*
fujitsusi-r_90brin-cpe:2.3:h:fujitsu:si-r_90brin:-:*:*:*:*:*:*:*
fujitsusi-r570b_firmware*cpe:2.3:o:fujitsu:si-r570b_firmware:*:*:*:*:*:*:*:*
fujitsusi-r570b-cpe:2.3:h:fujitsu:si-r570b:-:*:*:*:*:*:*:*
fujitsusi-r370b_firmware*cpe:2.3:o:fujitsu:si-r370b_firmware:*:*:*:*:*:*:*:*
fujitsusi-r370b-cpe:2.3:h:fujitsu:si-r370b:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fujitsu	si-r_30b_firmware	*	cpe:2.3:o:fujitsu:si-r_30b_firmware::::::::
fujitsu	si-r_30b	-	cpe:2.3:h:fujitsu:si-r_30b:-:::::::*
fujitsu	si-r_130b_firmware	*	cpe:2.3:o:fujitsu:si-r_130b_firmware::::::::
fujitsu	si-r_130b	-	cpe:2.3:h:fujitsu:si-r_130b:-:::::::*
fujitsu	si-r_90brin_firmware	*	cpe:2.3:o:fujitsu:si-r_90brin_firmware::::::::
fujitsu	si-r_90brin	-	cpe:2.3:h:fujitsu:si-r_90brin:-:::::::*
fujitsu	si-r570b_firmware	*	cpe:2.3:o:fujitsu:si-r570b_firmware::::::::
fujitsu	si-r570b	-	cpe:2.3:h:fujitsu:si-r570b:-:::::::*
fujitsu	si-r370b_firmware	*	cpe:2.3:o:fujitsu:si-r370b_firmware::::::::
fujitsu	si-r370b	-	cpe:2.3:h:fujitsu:si-r370b:-:::::::*

Rows per page:

1-10 of 321

CNA Affected

[
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R 30B",
    "versions": [
      {
        "version": "All versions ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R 130B",
    "versions": [
      {
        "version": "All versions ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R 90brin",
    "versions": [
      {
        "version": "All versions ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R570B",
    "versions": [
      {
        "version": "All versions ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R370B",
    "versions": [
      {
        "version": "All versions ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R220D",
    "versions": [
      {
        "version": "All versions ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G100",
    "versions": [
      {
        "version": "V02.54 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G200",
    "versions": [
      {
        "version": "V02.54 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G100B",
    "versions": [
      {
        "version": "V04.12 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G110B",
    "versions": [
      {
        "version": "V04.12 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G200B",
    "versions": [
      {
        "version": "V04.12 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G210",
    "versions": [
      {
        "version": "V20.52 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G211",
    "versions": [
      {
        "version": "V20.52 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G120",
    "versions": [
      {
        "version": "V20.52 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Si-R G121",
    "versions": [
      {
        "version": "V20.52 and earlier ",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "SR-M 50AP1",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU96643580/

www.fujitsu.com/jp/products/network/support/2023/fjlan-01/

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

27.2%

JSON

Related for CVE-2023-38555