Lucene search
NECCVE-2023-39545HistoryNov 17, 2023 - 6:15 a.m.
CVE-2023-39545
2023-11-1706:15:33
CWE-552
NEC
web.nvd.nist.gov
16
cve
2023
39545
attacker
arbitrary command
clusterpro x
expresscluster x
singleserversafe
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
19.3%
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
Affected configurations
Node
necexpresscluster_xMatch1.0linux
ORnecexpresscluster_xMatch1.0windows
ORnecexpresscluster_xMatch2.0linux
ORnecexpresscluster_xMatch2.0windows
ORnecexpresscluster_xMatch2.1linux
ORnecexpresscluster_xMatch2.1windows
ORnecexpresscluster_xMatch3.0linux
ORnecexpresscluster_xMatch3.0windows
ORnecexpresscluster_xMatch3.1linux
ORnecexpresscluster_xMatch3.1windows
ORnecexpresscluster_xMatch3.2linux
ORnecexpresscluster_xMatch3.2windows
ORnecexpresscluster_xMatch3.3linux
ORnecexpresscluster_xMatch3.3windows
ORnecexpresscluster_xMatch4.0linux
ORnecexpresscluster_xMatch4.0windows
ORnecexpresscluster_xMatch4.1linux
ORnecexpresscluster_xMatch4.1windows
ORnecexpresscluster_xMatch4.2linux
ORnecexpresscluster_xMatch4.2windows
ORnecexpresscluster_xMatch4.3linux
ORnecexpresscluster_xMatch4.3windows
ORnecexpresscluster_xMatch5.0linux
ORnecexpresscluster_xMatch5.0windows
ORnecexpresscluster_xMatch5.1linux
ORnecexpresscluster_xMatch5.1windows
ORnecexpresscluster_x_singleserversafeMatch1.0linux
ORnecexpresscluster_x_singleserversafeMatch1.0windows
ORnecexpresscluster_x_singleserversafeMatch2.0linux
ORnecexpresscluster_x_singleserversafeMatch2.0windows
ORnecexpresscluster_x_singleserversafeMatch2.1linux
ORnecexpresscluster_x_singleserversafeMatch2.1windows
ORnecexpresscluster_x_singleserversafeMatch3.0linux
ORnecexpresscluster_x_singleserversafeMatch3.0windows
ORnecexpresscluster_x_singleserversafeMatch3.1linux
ORnecexpresscluster_x_singleserversafeMatch3.1windows
ORnecexpresscluster_x_singleserversafeMatch3.2linux
ORnecexpresscluster_x_singleserversafeMatch3.2windows
ORnecexpresscluster_x_singleserversafeMatch3.3linux
ORnecexpresscluster_x_singleserversafeMatch3.3windows
ORnecexpresscluster_x_singleserversafeMatch4.0linux
ORnecexpresscluster_x_singleserversafeMatch4.0windows
ORnecexpresscluster_x_singleserversafeMatch4.1linux
ORnecexpresscluster_x_singleserversafeMatch4.1windows
ORnecexpresscluster_x_singleserversafeMatch4.2linux
ORnecexpresscluster_x_singleserversafeMatch4.2windows
ORnecexpresscluster_x_singleserversafeMatch4.3linux
ORnecexpresscluster_x_singleserversafeMatch4.3windows
ORnecexpresscluster_x_singleserversafeMatch5.0linux
ORnecexpresscluster_x_singleserversafeMatch5.0windows
ORnecexpresscluster_x_singleserversafeMatch5.1linux
ORnecexpresscluster_x_singleserversafeMatch5.1windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nec | expresscluster_x | 1.0 | cpe:2.3:a:nec:expresscluster_x:1.0:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 1.0 | cpe:2.3:a:nec:expresscluster_x:1.0:*:*:*:*:windows:*:* |
| nec | expresscluster_x | 2.0 | cpe:2.3:a:nec:expresscluster_x:2.0:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 2.0 | cpe:2.3:a:nec:expresscluster_x:2.0:*:*:*:*:windows:*:* |
| nec | expresscluster_x | 2.1 | cpe:2.3:a:nec:expresscluster_x:2.1:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 2.1 | cpe:2.3:a:nec:expresscluster_x:2.1:*:*:*:*:windows:*:* |
| nec | expresscluster_x | 3.0 | cpe:2.3:a:nec:expresscluster_x:3.0:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 3.0 | cpe:2.3:a:nec:expresscluster_x:3.0:*:*:*:*:windows:*:* |
| nec | expresscluster_x | 3.1 | cpe:2.3:a:nec:expresscluster_x:3.1:*:*:*:*:linux:*:* |
| nec | expresscluster_x | 3.1 | cpe:2.3:a:nec:expresscluster_x:3.1:*:*:*:*:windows:*:* |
CNA Affected
[
{
"product": "CLUSTERPRO X (EXPRESSCLUSTER X)",
"vendor": "NEC Corporation",
"versions": [
{
"status": "affected",
"version": "1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1"
}
]
},
{
"product": "CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe)",
"vendor": "NEC Corporation",
"versions": [
{
"status": "affected",
"version": "1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2023-39545
2023-11-17 05:30:10
prion
prion
Command injection
2023-11-17 06:15:00
cvelist
cvelist
CVE-2023-39545
2023-11-17 05:30:10
nvd
nvd
CVE-2023-39545
2023-11-17 06:15:33
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
19.3%
Related for CVE-2023-39545