Log in Start free

Vulnerability · Published Oct 3, 2023 · Assigned by jpcert

CVE-2023-42771

High 8.3

In plain English

A high-severity authentication bypass in ACERA 1310 from FURUNO SYSTEMS Co.,Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).

Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.4%top 68.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration files and/or log files, and upload configuration files and/or firmware. They are affected when running in ST(Standalone) mode.

Affected products (as reported)

VendorProductVersions
FURUNO SYSTEMS Co.,Ltd. ACERA 1320 firmware ver.01.26 and earlier
FURUNO SYSTEMS Co.,Ltd. ACERA 1310 firmware ver.01.26 and earlier

Weakness: CWE-288 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

References