← Back

CVE-2023-41086

nvd nist
Published: Oct 3, 2023Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

Affected (12)

Furunosystems
12 products
Acera 1210 Firmware
Acera 1150i Firmware
Acera 1150w Firmware
Acera 1110 Firmware
Acera 1020 Firmware
Acera 1010 Firmware
Acera 950 Firmware
Acera 850f Firmware
Acera 900 Firmware
Acera 850m Firmware
Acera 810 Firmware
Acera 800st Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 1210 Firmware
Up to 02.36
Running on/withPlatform Versions
Furunosystems
Acera 1210
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 1150i Firmware
Up to 01.35
Running on/withPlatform Versions
Furunosystems
Acera 1150i
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 1150w Firmware
Up to 01.35
Running on/withPlatform Versions
Furunosystems
Acera 1150w
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 1110 Firmware
Up to 01.76
Running on/withPlatform Versions
Furunosystems
Acera 1110
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 1020 Firmware
Up to 01.86
Running on/withPlatform Versions
Furunosystems
Acera 1020
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 1010 Firmware
Up to 01.86
Running on/withPlatform Versions
Furunosystems
Acera 1010
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 950 Firmware
Up to 01.60
Running on/withPlatform Versions
Furunosystems
Acera 950
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 850f Firmware
Up to 01.60
Running on/withPlatform Versions
Furunosystems
Acera 850f
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 900 Firmware
Up to 02.54
Running on/withPlatform Versions
Furunosystems
Acera 900
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 850m Firmware
Up to 02.06
Running on/withPlatform Versions
Furunosystems
Acera 850m
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 810 Firmware
Up to 03.74
Running on/withPlatform Versions
Furunosystems
Acera 810
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acera 800st Firmware
Up to 07.35
Running on/withPlatform Versions
Furunosystems
Acera 800st
All versions

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (4)

Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.