CVE-2023-39545

Published: Nov 17, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

Affected (52)

Products: Nec: Expresscluster X, Expresscluster X Singleserversafe

Nec

2 products

Expresscluster X

Expresscluster X Singleserversafe

Configuration A

52 vulnerable

Vulnerable Software	Affected Versions
Nec Expresscluster X	Version 1.0
Nec Expresscluster X	Version 1.0
Nec Expresscluster X	Version 2.0
Nec Expresscluster X	Version 2.0
Nec Expresscluster X	Version 2.1
Nec Expresscluster X	Version 2.1
Nec Expresscluster X	Version 3.0
Nec Expresscluster X	Version 3.0
Nec Expresscluster X	Version 3.1
Nec Expresscluster X	Version 3.1
Nec Expresscluster X	Version 3.2
Nec Expresscluster X	Version 3.2
Nec Expresscluster X	Version 3.3
Nec Expresscluster X	Version 3.3
Nec Expresscluster X	Version 4.0
Nec Expresscluster X	Version 4.0
Nec Expresscluster X	Version 4.1
Nec Expresscluster X	Version 4.1
Nec Expresscluster X	Version 4.2
Nec Expresscluster X	Version 4.2
Nec Expresscluster X	Version 4.3
Nec Expresscluster X	Version 4.3
Nec Expresscluster X	Version 5.0
Nec Expresscluster X	Version 5.0
Nec Expresscluster X	Version 5.1
Nec Expresscluster X	Version 5.1
Nec Expresscluster X Singleserversafe	Version 1.0
Nec Expresscluster X Singleserversafe	Version 1.0
Nec Expresscluster X Singleserversafe	Version 2.0
Nec Expresscluster X Singleserversafe	Version 2.0
Nec Expresscluster X Singleserversafe	Version 2.1
Nec Expresscluster X Singleserversafe	Version 2.1
Nec Expresscluster X Singleserversafe	Version 3.0
Nec Expresscluster X Singleserversafe	Version 3.0
Nec Expresscluster X Singleserversafe	Version 3.1
Nec Expresscluster X Singleserversafe	Version 3.1
Nec Expresscluster X Singleserversafe	Version 3.2
Nec Expresscluster X Singleserversafe	Version 3.2
Nec Expresscluster X Singleserversafe	Version 3.3
Nec Expresscluster X Singleserversafe	Version 3.3
Nec Expresscluster X Singleserversafe	Version 4.0
Nec Expresscluster X Singleserversafe	Version 4.0
Nec Expresscluster X Singleserversafe	Version 4.1
Nec Expresscluster X Singleserversafe	Version 4.1
Nec Expresscluster X Singleserversafe	Version 4.2
Nec Expresscluster X Singleserversafe	Version 4.2
Nec Expresscluster X Singleserversafe	Version 4.3
Nec Expresscluster X Singleserversafe	Version 4.3
Nec Expresscluster X Singleserversafe	Version 5.0
Nec Expresscluster X Singleserversafe	Version 5.0
Nec Expresscluster X Singleserversafe	Version 5.1
Nec Expresscluster X Singleserversafe	Version 5.1

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (2)

https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

Source: psirt-info@cyber.jp.nec.com

PatchThird Party Advisory

https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.