CVE-2023-39545: High severity nec expresscluster x vulnerability

Published Nov 17, 2023

Updated

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

Affected Software

52 affected components

NEC Expresscluster X Linux=1.0

NEC Expresscluster X Windows=1.0

NEC Expresscluster X Linux=2.0

NEC Expresscluster X Windows=2.0

NEC Expresscluster X Linux=2.1

NEC Expresscluster X Windows=2.1

NEC Expresscluster X Linux=3.0

NEC Expresscluster X Windows=3.0

NEC Expresscluster X Linux=3.1

NEC Expresscluster X Windows=3.1

NEC Expresscluster X Linux=3.2

NEC Expresscluster X Windows=3.2

NEC Expresscluster X Linux=3.3

NEC Expresscluster X Windows=3.3

NEC Expresscluster X Linux=4.0

NEC Expresscluster X Windows=4.0

NEC Expresscluster X Linux=4.1

NEC Expresscluster X Windows=4.1

NEC Expresscluster X Linux=4.2

NEC Expresscluster X Windows=4.2

NEC Expresscluster X Linux=4.3

NEC Expresscluster X Windows=4.3

NEC Expresscluster X Linux=5.0

NEC Expresscluster X Windows=5.0

NEC Expresscluster X Linux=5.1

NEC Expresscluster X Windows=5.1

NEC Expresscluster X Singleserversafe Linux=1.0

NEC Expresscluster X Singleserversafe Windows=1.0

NEC Expresscluster X Singleserversafe Linux=2.0

NEC Expresscluster X Singleserversafe Windows=2.0

NEC Expresscluster X Singleserversafe Linux=2.1

NEC Expresscluster X Singleserversafe Windows=2.1

NEC Expresscluster X Singleserversafe Linux=3.0

NEC Expresscluster X Singleserversafe Windows=3.0

NEC Expresscluster X Singleserversafe Linux=3.1

NEC Expresscluster X Singleserversafe Windows=3.1

NEC Expresscluster X Singleserversafe Linux=3.2

NEC Expresscluster X Singleserversafe Windows=3.2

NEC Expresscluster X Singleserversafe Linux=3.3

NEC Expresscluster X Singleserversafe Windows=3.3

NEC Expresscluster X Singleserversafe Linux=4.0

NEC Expresscluster X Singleserversafe Windows=4.0

NEC Expresscluster X Singleserversafe Linux=4.1

NEC Expresscluster X Singleserversafe Windows=4.1

NEC Expresscluster X Singleserversafe Linux=4.2

NEC Expresscluster X Singleserversafe Windows=4.2

NEC Expresscluster X Singleserversafe Linux=4.3

NEC Expresscluster X Singleserversafe Windows=4.3

NEC Expresscluster X Singleserversafe Linux=5.0

NEC Expresscluster X Singleserversafe Windows=5.0

NEC Expresscluster X Singleserversafe Linux=5.1

NEC Expresscluster X Singleserversafe Windows=5.1

Remediation

Patch Available

https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

Event History

Nov 17, 2023

CVE Published

05:30 AM

Data Sourced

05:30 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-39545?

CVE-2023-39545 is a vulnerability in CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier that allows an attacker to log in and execute arbitrary commands.

What is the severity of CVE-2023-39545?

CVE-2023-39545 has a severity rating of 8.8 (high).

Which software versions are affected by CVE-2023-39545?

CVE-2023-39545 affects multiple versions of NEC Expresscluster X and NEC Expresscluster X Singleserversafe.

How can an attacker exploit CVE-2023-39545?

An attacker can exploit CVE-2023-39545 by logging in to the affected product and executing arbitrary commands.

Where can I find more information about CVE-2023-39545?

You can find more information about CVE-2023-39545 [here](https://jpn.nec.com/security-info/secinfo/nv23-009_en.html).