Lucene search
HistoryNov 17, 2023 - 6:15 a.m.
CVE-2023-39545
cve-2023-39545
security vulnerability
clusterpro x
expresscluster x
arbitrary command execution
product login
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
Affected configurations
Node
necexpresscluster_xMatch1.0linux
ORnecexpresscluster_xMatch1.0windows
ORnecexpresscluster_xMatch2.0linux
ORnecexpresscluster_xMatch2.0windows
ORnecexpresscluster_xMatch2.1linux
ORnecexpresscluster_xMatch2.1windows
ORnecexpresscluster_xMatch3.0linux
ORnecexpresscluster_xMatch3.0windows
ORnecexpresscluster_xMatch3.1linux
ORnecexpresscluster_xMatch3.1windows
ORnecexpresscluster_xMatch3.2linux
ORnecexpresscluster_xMatch3.2windows
ORnecexpresscluster_xMatch3.3linux
ORnecexpresscluster_xMatch3.3windows
ORnecexpresscluster_xMatch4.0linux
ORnecexpresscluster_xMatch4.0windows
ORnecexpresscluster_xMatch4.1linux
ORnecexpresscluster_xMatch4.1windows
ORnecexpresscluster_xMatch4.2linux
ORnecexpresscluster_xMatch4.2windows
ORnecexpresscluster_xMatch4.3linux
ORnecexpresscluster_xMatch4.3windows
ORnecexpresscluster_xMatch5.0linux
ORnecexpresscluster_xMatch5.0windows
ORnecexpresscluster_xMatch5.1linux
ORnecexpresscluster_xMatch5.1windows
ORnecexpresscluster_x_singleserversafeMatch1.0linux
ORnecexpresscluster_x_singleserversafeMatch1.0windows
ORnecexpresscluster_x_singleserversafeMatch2.0linux
ORnecexpresscluster_x_singleserversafeMatch2.0windows
ORnecexpresscluster_x_singleserversafeMatch2.1linux
ORnecexpresscluster_x_singleserversafeMatch2.1windows
ORnecexpresscluster_x_singleserversafeMatch3.0linux
ORnecexpresscluster_x_singleserversafeMatch3.0windows
ORnecexpresscluster_x_singleserversafeMatch3.1linux
ORnecexpresscluster_x_singleserversafeMatch3.1windows
ORnecexpresscluster_x_singleserversafeMatch3.2linux
ORnecexpresscluster_x_singleserversafeMatch3.2windows
ORnecexpresscluster_x_singleserversafeMatch3.3linux
ORnecexpresscluster_x_singleserversafeMatch3.3windows
ORnecexpresscluster_x_singleserversafeMatch4.0linux
ORnecexpresscluster_x_singleserversafeMatch4.0windows
ORnecexpresscluster_x_singleserversafeMatch4.1linux
ORnecexpresscluster_x_singleserversafeMatch4.1windows
ORnecexpresscluster_x_singleserversafeMatch4.2linux
ORnecexpresscluster_x_singleserversafeMatch4.2windows
ORnecexpresscluster_x_singleserversafeMatch4.3linux
ORnecexpresscluster_x_singleserversafeMatch4.3windows
ORnecexpresscluster_x_singleserversafeMatch5.0linux
ORnecexpresscluster_x_singleserversafeMatch5.0windows
ORnecexpresscluster_x_singleserversafeMatch5.1linux
ORnecexpresscluster_x_singleserversafeMatch5.1windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nec | expresscluster_x | 1.0 | cpe:2.3:a:nec:expresscluster_x:1.0:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 1.0 | cpe:2.3:a:nec:expresscluster_x:1.0:*:*:*:*:windows:*:* |
| nec | expresscluster_x | 2.0 | cpe:2.3:a:nec:expresscluster_x:2.0:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 2.0 | cpe:2.3:a:nec:expresscluster_x:2.0:*:*:*:*:windows:*:* |
| nec | expresscluster_x | 2.1 | cpe:2.3:a:nec:expresscluster_x:2.1:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 2.1 | cpe:2.3:a:nec:expresscluster_x:2.1:*:*:*:*:windows:*:* |
| nec | expresscluster_x | 3.0 | cpe:2.3:a:nec:expresscluster_x:3.0:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 3.0 | cpe:2.3:a:nec:expresscluster_x:3.0:*:*:*:*:windows:*:* |
| nec | expresscluster_x | 3.1 | cpe:2.3:a:nec:expresscluster_x:3.1:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 3.1 | cpe:2.3:a:nec:expresscluster_x:3.1:*:*:*:*:windows:*:* |
Related
vulnrichment
vulnrichment
CVE-2023-39545
2023-11-17 05:30:10
prion
prion
Command injection
2023-11-17 06:15:00
cvelist
cvelist
CVE-2023-39545
2023-11-17 05:30:10
cve
cve
CVE-2023-39545
2023-11-17 06:15:33
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Related for NVD:CVE-2023-39545