Skip to content
OpenAdvisories
High · 8.3 CVE-2023-42771 EUVD-2023-47203GHSA-j2mj-6c7w-rh5m

Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a ne…

Published Oct 3, 2023 · Updated Sep 20, 2024 · Assigned by jpcert

Description

Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration files and/or log files, and upload configuration files and/or firmware. They are affected when running in ST(Standalone) mode.

Affected products

VendorProductAffectedFixed
FURUNO SYSTEMS ACERA 1320 firmware ver.01.26 and earlier —
FURUNO SYSTEMS ACERA 1310 firmware ver.01.26 and earlier —

References