Skip to content
OpenAdvisories
Unscored CVE-2023-43627 EUVD-2023-48027GHSA-xjf4-cg52-rf4g

Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-a…

Published Oct 3, 2023 · Updated Sep 20, 2024 · Assigned by jpcert

Description

Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent authenticated attacker to alter critical information such as system files by sending a specially crafted request. They are affected when running in ST(Standalone) mode.

Affected products

VendorProductAffectedFixed
FURUNO SYSTEMS ACERA 1320 firmware ver.01.26 and earlier —
FURUNO SYSTEMS ACERA 1310 firmware ver.01.26 and earlier —

References