CVE-2023-39547

Published: Nov 17, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

Affected (48)

Products: Nec: Expresscluster X, Expresscluster X Singleserversafe

Nec

2 products

Expresscluster X

Expresscluster X Singleserversafe

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Nec Expresscluster X	Version 1.0
Nec Expresscluster X	Version 1.0
Nec Expresscluster X	Version 2.0
Nec Expresscluster X	Version 2.0
Nec Expresscluster X	Version 2.1
Nec Expresscluster X	Version 2.1
Nec Expresscluster X	Version 3.0
Nec Expresscluster X	Version 3.0
Nec Expresscluster X	Version 3.1
Nec Expresscluster X	Version 3.1
Nec Expresscluster X	Version 3.2
Nec Expresscluster X	Version 3.2
Nec Expresscluster X	Version 3.3
Nec Expresscluster X	Version 3.3
Nec Expresscluster X	Version 4.0
Nec Expresscluster X	Version 4.0
Nec Expresscluster X	Version 4.1
Nec Expresscluster X	Version 4.1
Nec Expresscluster X	Version 4.2
Nec Expresscluster X	Version 4.2
Nec Expresscluster X	Version 4.3
Nec Expresscluster X	Version 4.3
Nec Expresscluster X	Version 5.0
Nec Expresscluster X	Version 5.0
Nec Expresscluster X Singleserversafe	Version 1.0
Nec Expresscluster X Singleserversafe	Version 1.0
Nec Expresscluster X Singleserversafe	Version 2.0
Nec Expresscluster X Singleserversafe	Version 2.0
Nec Expresscluster X Singleserversafe	Version 2.1
Nec Expresscluster X Singleserversafe	Version 2.1
Nec Expresscluster X Singleserversafe	Version 3.0
Nec Expresscluster X Singleserversafe	Version 3.0
Nec Expresscluster X Singleserversafe	Version 3.1
Nec Expresscluster X Singleserversafe	Version 3.1
Nec Expresscluster X Singleserversafe	Version 3.2
Nec Expresscluster X Singleserversafe	Version 3.2
Nec Expresscluster X Singleserversafe	Version 3.3
Nec Expresscluster X Singleserversafe	Version 3.3
Nec Expresscluster X Singleserversafe	Version 4.0
Nec Expresscluster X Singleserversafe	Version 4.0
Nec Expresscluster X Singleserversafe	Version 4.1
Nec Expresscluster X Singleserversafe	Version 4.1
Nec Expresscluster X Singleserversafe	Version 4.2
Nec Expresscluster X Singleserversafe	Version 4.2
Nec Expresscluster X Singleserversafe	Version 4.3
Nec Expresscluster X Singleserversafe	Version 4.3
Nec Expresscluster X Singleserversafe	Version 5.0
Nec Expresscluster X Singleserversafe	Version 5.0

Related CWEs

CWE-294

Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

References (2)

https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

Source: psirt-info@cyber.jp.nec.com

PatchThird Party Advisory

https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.