CVE-2023-39544: High severity nec expresscluster x vulnerability

Published Nov 17, 2023

Updated

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

Affected Software

52 affected components

NEC Expresscluster X Linux=1.0

NEC Expresscluster X Windows=1.0

NEC Expresscluster X Linux=2.0

NEC Expresscluster X Windows=2.0

NEC Expresscluster X Linux=2.1

NEC Expresscluster X Windows=2.1

NEC Expresscluster X Linux=3.0

NEC Expresscluster X Windows=3.0

NEC Expresscluster X Linux=3.1

NEC Expresscluster X Windows=3.1

NEC Expresscluster X Linux=3.2

NEC Expresscluster X Windows=3.2

NEC Expresscluster X Linux=3.3

NEC Expresscluster X Windows=3.3

NEC Expresscluster X Linux=4.0

NEC Expresscluster X Windows=4.0

NEC Expresscluster X Linux=4.1

NEC Expresscluster X Windows=4.1

NEC Expresscluster X Linux=4.2

NEC Expresscluster X Windows=4.2

NEC Expresscluster X Linux=4.3

NEC Expresscluster X Windows=4.3

NEC Expresscluster X Linux=5.0

NEC Expresscluster X Windows=5.0

NEC Expresscluster X Linux=5.1

NEC Expresscluster X Windows=5.1

NEC Expresscluster X Singleserversafe Linux=1.0

NEC Expresscluster X Singleserversafe Windows=1.0

NEC Expresscluster X Singleserversafe Linux=2.0

NEC Expresscluster X Singleserversafe Windows=2.0

NEC Expresscluster X Singleserversafe Linux=2.1

NEC Expresscluster X Singleserversafe Windows=2.1

NEC Expresscluster X Singleserversafe Linux=3.0

NEC Expresscluster X Singleserversafe Windows=3.0

NEC Expresscluster X Singleserversafe Linux=3.1

NEC Expresscluster X Singleserversafe Windows=3.1

NEC Expresscluster X Singleserversafe Linux=3.2

NEC Expresscluster X Singleserversafe Windows=3.2

NEC Expresscluster X Singleserversafe Linux=3.3

NEC Expresscluster X Singleserversafe Windows=3.3

NEC Expresscluster X Singleserversafe Linux=4.0

NEC Expresscluster X Singleserversafe Windows=4.0

NEC Expresscluster X Singleserversafe Linux=4.1

NEC Expresscluster X Singleserversafe Windows=4.1

NEC Expresscluster X Singleserversafe Linux=4.2

NEC Expresscluster X Singleserversafe Windows=4.2

NEC Expresscluster X Singleserversafe Linux=4.3

NEC Expresscluster X Singleserversafe Windows=4.3

NEC Expresscluster X Singleserversafe Linux=5.0

NEC Expresscluster X Singleserversafe Windows=5.0

NEC Expresscluster X Singleserversafe Linux=5.1

NEC Expresscluster X Singleserversafe Windows=5.1

Remediation

Patch Available

https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

Event History

Nov 17, 2023

CVE Published

05:28 AM

Data Sourced

05:28 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-39544?

CVE-2023-39544 is a vulnerability that allows an attacker to log in to CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier and execute arbitrary commands.

What is the severity of CVE-2023-39544?

CVE-2023-39544 has a severity level of 8.8 (high).

Which software versions are affected by CVE-2023-39544?

CVE-2023-39544 affects CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, as well as CLUSTERPRO X SingleServerSafe 5.1 and earlier and EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier.

How can an attacker exploit CVE-2023-39544?

An attacker can exploit CVE-2023-39544 by logging into the vulnerable product and executing arbitrary commands.

Is there a fix available for CVE-2023-39544?

Yes, NEC has released a fix for CVE-2023-39544. Please refer to the official reference link for more information.