CVE-2023-39546
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 17, 2023
Updated: Nov 24, 2023
CWE ID 836
Summary
CVE-2023-39546 is a vulnerability affecting CLUSTERPRO X Ver5.1 and earlier, EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, and EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier. An attacker can exploit this issue to gain unauthorized login access and execute arbitrary commands on the affected systems. This poses a significant risk for unauthorized system takeover and potential data breaches. It is crucial that users of these affected products apply the available patches as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- NEC ExpressCluster X
Affected Vendors
- NEC Corporation