CVE-2023-39429

🗓️ 03 Oct 2023 00:14:18Reported by jpcertType

CVE-2023-39429 XSS in FURUNO SYSTEMS WLAN AP devices allows injection via crafted configuration. Affected products include ACERA 1210, 1150i, 1150w, 1110, 1020, 1010, 950, 850F, 900, 850M, 810, 800ST firmware

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-39429	3 Oct 202307:40	–	circl
CNNVD	Furuno wireless LAN access point devices cross-site scripting vulnerability	2 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-39429	3 Oct 202300:14	–	cvelist
EUVD	EUVD-2023-43153	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in multiple FURUNO SYSTEMS wireless LAN access point devices in ST(Standalone) mode	3 Oct 202305:26	–	jvn
NVD	CVE-2023-39429	3 Oct 202301:15	–	nvd
Prion	Cross site scripting	3 Oct 202301:15	–	prion
Vulnrichment	CVE-2023-39429	3 Oct 202300:14	–	vulnrichment

NVD

Vulners

Node

furunosystems acera_1210_firmwareRange≤02.36

AND

furunosystems acera_1210Match-

Node

furunosystems acera_1150i_firmwareRange≤01.35

AND

furunosystems acera_1150iMatch-

Node

furunosystems acera_1150w_firmwareRange≤01.35

AND

furunosystems acera_1150wMatch-

Node

furunosystems acera_1110_firmwareRange≤01.76

AND

furunosystems acera_1110Match-

Node

furunosystems acera_1020_firmwareRange≤01.86

AND

furunosystems acera_1020Match-

Node

furunosystems acera_1010_firmwareRange≤01.86

AND

furunosystems acera_1010Match-

Node

furunosystems acera_950_firmwareRange≤01.60

AND

furunosystems acera_950Match-

Node

furunosystems acera_850f_firmwareRange≤01.60

AND

furunosystems acera_850fMatch-

Node

furunosystems acera_900_firmwareRange≤02.54

AND

furunosystems acera_900Match-

Node

furunosystems acera_850m_firmwareRange≤02.06

AND

furunosystems acera_850mMatch-

Node

furunosystems acera_810_firmwareRange≤03.74

AND

furunosystems acera_810Match-

Node

furunosystems acera_800st_firmwareRange≤07.35

AND

furunosystems acera_800stMatch-

[
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 1210",
    "versions": [
      {
        "version": "firmware ver.02.36 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 1150i",
    "versions": [
      {
        "version": "firmware ver.01.35 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 1150w",
    "versions": [
      {
        "version": "firmware ver.01.35 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 1110",
    "versions": [
      {
        "version": "firmware ver.01.76 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 1020",
    "versions": [
      {
        "version": "firmware ver.01.86 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 1010",
    "versions": [
      {
        "version": "firmware ver.01.86 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 950",
    "versions": [
      {
        "version": "firmware ver.01.60 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 850F",
    "versions": [
      {
        "version": "firmware ver.01.60 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 900",
    "versions": [
      {
        "version": "firmware ver.02.54 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 850M",
    "versions": [
      {
        "version": "firmware ver.02.06 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 810",
    "versions": [
      {
        "version": "firmware ver.03.74 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FURUNO SYSTEMS Co.,Ltd.",
    "product": "ACERA 800ST",
    "versions": [
      {
        "version": "firmware ver.07.35 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU94497038/
furunosystems	www.furunosystems.co.jp/news/info/vulner20231002.html

21 Nov 2024 08:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.4

EPSS0.00309

SSVC

CWE-79