Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    1 vulnerability found for Si-R 570B firmware by FUJITSU

    JVNDB-2023-002722

    Vulnerability from jvndb - Published: 2023-07-27 18:12 - Updated:2024-04-19 18:07
    Severity
    6.4 (Medium) - cvssV3_0 - CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L
    Summary
    Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass
    Details
    The web management interface of Fujitsu network devices Si-R series and SR-M series contains an authentication bypass vulnerability (CWE-287,CVE-2023-38555). Katsuhiko Sato (a.k.a. goroh_kun) of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-002722.html",
  "dc:date": "2024-04-19T18:07+09:00",
  "dcterms:issued": "2023-07-27T18:12+09:00",
  "dcterms:modified": "2024-04-19T18:07+09:00",
  "description": "The web management interface of Fujitsu network devices Si-R series and SR-M series contains an authentication bypass vulnerability (CWE-287,CVE-2023-38555).\r\n\r\nKatsuhiko Sato (a.k.a. goroh_kun) of 00One, Inc. reported this vulnerability to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-002722.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:fujitsu:si-r220d_firmware",
      "@product": "Si-R 220D firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r370b_firmware",
      "@product": "Si-R 370B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r570b_firmware",
      "@product": "Si-R 570B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_130b_firmware",
      "@product": "Si-R 130B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_30b_firmware",
      "@product": "Si-R 30B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_90brin_firmware",
      "@product": "Si-R 90brin firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g100b_firmware",
      "@product": "Si-R G100B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g100_firmware",
      "@product": "Si-R G100 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g110b_firmware",
      "@product": "Si-R G110B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g120_firmware",
      "@product": "Si-R G120 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g121_firmware",
      "@product": "Si-R G121 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g200b_firmware",
      "@product": "Si-R G200B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g200_firmware",
      "@product": "Si-R G200 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g210_firmware",
      "@product": "Si-R G210 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g211_firmware",
      "@product": "Si-R G211 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:sr-m_50ap1_firmware",
      "@product": "SR-M 50AP1 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "5.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:A/AC:H/Au:N/C:P/I:C/A:P",
      "@version": "2.0"
    },
    {
      "@score": "6.4",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2023-002722",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU96643580/index.html",
      "@id": "JVNVU#96643580",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-38555",
      "@id": "CVE-2023-38555",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-38555",
      "@id": "CVE-2023-38555",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-287",
      "@title": "Improper Authentication(CWE-287)"
    }
  ],
  "title": "Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass"
}