CVE-2023-39379

Fujitsu Software Infrastructure Manager ISM stores sensitive information at the product's maintenance data ismsnap in cleartext form. As a result, the password for the proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Software...

Fujitsu Software Infrastructure Manager Security Vulnerability

Fujitsu Software Infrastructure Manager is an infrastructure manager from Fujitsu Japan. A security vulnerability exists in Fujitsu Software Infrastructure Manager, which arises from sensitive information being stored in plaintext in product maintenance data ismsnap...

JVN#38847224: Fujitsu Software Infrastructure Manager (ISM) stores sensitive information in cleartext

Fujitsu Software Infrastructure Manager ISM V2.8.0.060, provided by Fujitsu Limited, stores the password for the proxy server in cleartext form to the product's maintenance data ismsnap CWE-312 under the following conditions. Using a proxy server that requires authentication in the connection fro...

Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass

Overview The web management interface of Fujitsu network devices Si-R series and SR-M series contains an authentication bypass vulnerability CWE-287,CVE-2023-38555. Katsuhiko Sato a.k.a. gorohkun of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer...

Fujitsu Real-time Video Transmission Gear "IP series" uses a hard-coded credentials

Overview Real-time Video Transmission Gear "IP series" provided by Fujitsu Limited uses a hard-coded credentials CWE-798 . The product's credentials for factory testing may be obtained by reverse engineering and others. Fujitsu Limited reported this vulnerability to JPCERT/CC to notify users of i...

CVE-2023-38555

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...

CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

Hardcoded credentials

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

Authentication flaw

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...

CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

CVE-2023-38433

CVE-2023-38433 affects Fujitsu Real-time Video Transmission Gear IP series. The vulnerability arises from hard-coded credentials (CWE-798) that could allow a remote, unauthenticated attacker to log in and initialize or reboot devices, terminating video transmission. Affected firmware versions inc...

CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

CVE-2023-38555

CVE-2023-38555 affects Fujitsu network devices Si-R series and SR-M series (including SR-M 50AP1). The web management interface contains an authentication bypass that enables a network-adjacent, unauthenticated attacker to view and modify, or reset, configuration settings. Affected products/versi...

CVE-2023-38555

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...

CVE-2023-38555

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R...

JVN#95727578: Fujitsu Real-time Video Transmission Gear "IP series" uses a hard-coded credentials

Real-time Video Transmission Gear "IP series" provided by Fujitsu Limited uses a hard-coded credentials CWE-798 . The product's credentials for factory testing may be obtained by reverse engineering and others. Impact An attacker who log in to the web interface using the obtained credentials may...

PT-2023-8778 · Fujitsu · Fujitsu Sr-M 50Ap1 +13

Name of the Vulnerable Software and Affected Versions: Fujitsu Si-R 30B all versions Fujitsu Si-R 130B all versions Fujitsu Si-R 90brin all versions Fujitsu Si-R570B all versions Fujitsu Si-R370B all versions Fujitsu Si-R220D all versions Fujitsu Si-R G100 versions V02.54 and earlier Fujitsu Si-R...

Fujitsu network devices Si-R series 授权问题漏洞

The Fujitsu network devices Si-R series is a router from Fujitsu, Japan. A security vulnerability exists in the Fujitsu Si-R series and SR-M series, which originates from an authentication bypass vulnerability. An attacker could exploit this vulnerability to obtain, change, or reset the...

Fujitsu Real-time Video Transmission Gear IP series 信任管理问题漏洞

The Fujitsu Real-time Video Transmission Gear IP series is a real-time video transmission device from Fujitsu, Japan. A security vulnerability exists in the Fujitsu Real-time Video Transmission Gear IP series, which stems from a hard-coded credentials vulnerability. An attacker could use this...