CVE-2023-39546

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 17, 2023
Updated: Nov 24, 2023
CWE ID 836

Summary

CVE-2023-39546 is a vulnerability affecting CLUSTERPRO X Ver5.1 and earlier, EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, and EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier. An attacker can exploit this issue to gain unauthorized login access and execute arbitrary commands on the affected systems. This poses a significant risk for unauthorized system takeover and potential data breaches. It is crucial that users of these affected products apply the available patches as soon as possible to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • NEC ExpressCluster X

Affected Vendors

  • NEC Corporation