CVE-2026-32964

Published: Apr 20, 2026Modified: Jun 17, 2026

6.9

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: vultures@jpcert.or.jp (Secondary)

Description

SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.

Affected (2)

Products: Silextechnology: Sd 330ac Firmware, Amc Manager

Silextechnology

2 products

Sd 330ac Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Silextechnology Sd 330ac Firmware	Before 1.50

Running on/with	Platform Versions
Silextechnology Sd 330ac	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Silextechnology Amc Manager	Before 5.1.0

Related CWEs

Improper Neutralization of CRLF Sequences ('CRLF Injection')

The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

References (3)

https://jvn.jp/en/vu/JVNVU94271449/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.silex.jp/support/security-advisories/2026-001

Source: vultures@jpcert.or.jp

Vendor Advisory

https://www.silex.jp/support/security-advisories/en/2026-001

Source: vultures@jpcert.or.jp

Vendor Advisory

Timeline

No history available yet.