NetSight
IP …
medium5.4

CVE-2023-39429

Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary script via a crafted…

Impact

Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary script via a crafted configuration. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

Affected products

VendorProductAffected versions
FurunosystemsAcera 1210 Firmware
through 02.36
FurunosystemsAcera 1150i Firmware
through 01.35
FurunosystemsAcera 1150w Firmware
through 01.35
FurunosystemsAcera 1110 Firmware
through 01.76
FurunosystemsAcera 1020 Firmware
through 01.86
FurunosystemsAcera 1010 Firmware
through 01.86
FurunosystemsAcera 950 Firmware
through 01.60
FurunosystemsAcera 850f Firmware
through 01.60
FurunosystemsAcera 900 Firmware
through 02.54
FurunosystemsAcera 850m Firmware
through 02.06
FurunosystemsAcera 810 Firmware
through 03.74
FurunosystemsAcera 800st Firmware
through 07.35

Weakness classification

CWE-79

References