CVE-2023-39548: Malicious File Upload

Published Nov 17, 2023

Updated

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

Affected Software

52 affected components

NEC Expresscluster X Linux=1.0

NEC Expresscluster X Windows=1.0

NEC Expresscluster X Linux=2.0

NEC Expresscluster X Windows=2.0

NEC Expresscluster X Linux=2.1

NEC Expresscluster X Windows=2.1

NEC Expresscluster X Linux=3.0

NEC Expresscluster X Windows=3.0

NEC Expresscluster X Linux=3.1

NEC Expresscluster X Windows=3.1

NEC Expresscluster X Linux=3.2

NEC Expresscluster X Windows=3.2

NEC Expresscluster X Linux=3.3

NEC Expresscluster X Windows=3.3

NEC Expresscluster X Linux=4.0

NEC Expresscluster X Windows=4.0

NEC Expresscluster X Linux=4.1

NEC Expresscluster X Windows=4.1

NEC Expresscluster X Linux=4.2

NEC Expresscluster X Windows=4.2

NEC Expresscluster X Linux=4.3

NEC Expresscluster X Windows=4.3

NEC Expresscluster X Linux=5.0

NEC Expresscluster X Windows=5.0

NEC Expresscluster X Linux=5.1

NEC Expresscluster X Windows=5.1

NEC Expresscluster X Singleserversafe Linux=1.0

NEC Expresscluster X Singleserversafe Windows=1.0

NEC Expresscluster X Singleserversafe Linux=2.0

NEC Expresscluster X Singleserversafe Windows=2.0

NEC Expresscluster X Singleserversafe Linux=2.1

NEC Expresscluster X Singleserversafe Windows=2.1

NEC Expresscluster X Singleserversafe Linux=3.0

NEC Expresscluster X Singleserversafe Windows=3.0

NEC Expresscluster X Singleserversafe Linux=3.1

NEC Expresscluster X Singleserversafe Windows=3.1

NEC Expresscluster X Singleserversafe Linux=3.2

NEC Expresscluster X Singleserversafe Windows=3.2

NEC Expresscluster X Singleserversafe Linux=3.3

NEC Expresscluster X Singleserversafe Windows=3.3

NEC Expresscluster X Singleserversafe Linux=4.0

NEC Expresscluster X Singleserversafe Windows=4.0

NEC Expresscluster X Singleserversafe Linux=4.1

NEC Expresscluster X Singleserversafe Windows=4.1

NEC Expresscluster X Singleserversafe Linux=4.2

NEC Expresscluster X Singleserversafe Windows=4.2

NEC Expresscluster X Singleserversafe Linux=4.3

NEC Expresscluster X Singleserversafe Windows=4.3

NEC Expresscluster X Singleserversafe Linux=5.0

NEC Expresscluster X Singleserversafe Windows=5.0

NEC Expresscluster X Singleserversafe Linux=5.1

NEC Expresscluster X Singleserversafe Windows=5.1

Remediation

Patch Available

https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

Event History

Nov 17, 2023

CVE Published

05:31 AM

Data Sourced

05:31 AM

DescriptionWeakness

Data Sourced

via NVD·06:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2023-39548.

What is the severity level of CVE-2023-39548?

CVE-2023-39548 has a severity level of 8.8 (High).

Which software versions are affected by CVE-2023-39548?

The affected software versions for CVE-2023-39548 are CLUSTERPRO X Ver5.1 and earlier, EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, and EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier.

What is the impact of CVE-2023-39548?

CVE-2023-39548 allows an attacker to log in to the product and execute an arbitrary command.

Where can I find more information about CVE-2023-39548?

You can find more information about CVE-2023-39548 at the following link: https://jpn.nec.com/security-info/secinfo/nv23-009_en.html