FURUNO SYSTEMS Co.,Ltd. vulnerabilities

Products

• ACERA 1010 3
• ACERA 1020 3
• ACERA 1110 3
• ACERA 1150i 3
• ACERA 1150w 3
• ACERA 1210 3
• ACERA 1310 3
• ACERA 1320 3
• ACERA 800ST 3
• ACERA 810 3
• ACERA 850F 3
• ACERA 850M 3
• ACERA 900 3
• ACERA 950 3
• ACERA 9010-08 1
• ACERA 9010-24 1

Latest FURUNO SYSTEMS Co.,Ltd. CVEs

Newest publication first

1. CVE-2024-28744 The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product wi...

   Published 2024-04-08

   High·CVSS 8.8 EPSS 0.30%

   The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as network configuratio...

2. CVE-2023-43627 Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent authenticated attacker to alter critical information....

   Published 2023-10-03

   Medium·CVSS 5.7 EPSS 0.31%

   Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent authenticated attacker to alter critical information such as system files by sending a specially crafted request. They are affected w...

3. CVE-2023-42771 Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the af...

   Published 2023-10-03

   High·CVSS 8.8 EPSS 0.37%

   Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration files and/or log files, and upload conf...

4. CVE-2023-41086 Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed. Af...

   Published 2023-10-03

   High·CVSS 8.8 EPSS 0.28%

   Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and e...

5. CVE-2023-39429 Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary script via a crafted configuration. Affected products and ver...

   Published 2023-10-03

   Medium·CVSS 5.4 EPSS 0.35%

   Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary script via a crafted configuration. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i fir...

6. CVE-2023-39222 OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web....

   Published 2023-10-03

   High·CVSS 8.8 EPSS 1.5%

   OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.