PT-2023-32045 · Sato · Sato Cl4Nx-J Plus

Cv3Tr4Ck · Published 2023-10-01 · Updated 2024-05-17 · CVE-2023-5326

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SATO CL4NX-J Plus version 1.13.2-u455 r2

Description A critical issue affects an unknown functionality of the WebConfig component, leading to improper authentication. The attack must be carried out within the local network. The exploit has been disclosed to the public and may be used.

Recommendations For SATO CL4NX-J Plus version 1.13.2-u455 r2, consider restricting access to the WebConfig component until a patch is available. As a temporary workaround, limit the ability to manipulate the affected functionality within the local network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-5326

Affected Products

Sato Cl4Nx-J Plus

References · 7

• 🔥 https://github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/SATO%20CL4NX-J%20Plus/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-5326 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5326 · Vendor Advisory
• https://t.me/cibsecurity/71386 · Telegram Post
• https://vuldb.com/?id.241027 · Note
• https://t.me/cvenotify/58857 · Telegram Post
• https://vuldb.com/?ctiid.241027 · Note