PT-2023-32045 · Sato · Sato Cl4Nx-J Plus

Cv3Tr4Ck · Publicado 2023-10-01 · Atualizado 2024-05-17 · CVE-2023-5326

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SATO CL4NX-J Plus version 1.13.2-u455 r2

Description A critical issue affects an unknown functionality of the WebConfig component, leading to improper authentication. The attack must be carried out within the local network. The exploit has been disclosed to the public and may be used.

Recommendations For SATO CL4NX-J Plus version 1.13.2-u455 r2, consider restricting access to the WebConfig component until a patch is available. As a temporary workaround, limit the ability to manipulate the affected functionality within the local network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2023-5326

Produtos afetados

Sato Cl4Nx-J Plus

Referências · 7

• 🔥 https://github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/SATO%20CL4NX-J%20Plus/README.md · Exploit
• https://t.me/cibsecurity/71386 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-5326 · Nota de Segurança
• https://vuldb.com/?id.241027 · Nota
• https://t.me/cvenotify/58857 · Publicação no Telegram
• https://vuldb.com/?ctiid.241027 · Nota
• https://osv.dev/vulnerability/CVE-2023-5326 · Aviso do Fabricante