Vulnerability · Published Nov 17, 2023 · Assigned by NEC
CVE-2023-39544
High 8.8
In plain English
A high-severity missing authorization in CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe) from NEC Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)0.6%top 49.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NEC Corporation | CLUSTERPRO X(EXPRESSCLUSTER X) | 1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1 |
| NEC Corporation | CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe) | 1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1 |
Weakness: CWE-862