CVE-2023-42771
03.10.2023, 01:15
Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration files and/or log files, and upload configuration files and/or firmware. They are affected when running in ST(Standalone) mode.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| furunosystems | acera_1310_firmware | 𝑥 ≤ 01.26 |
| furunosystems | acera_1320_firmware | 𝑥 ≤ 01.26 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| furunosystems | acera_1320_firmware | 𝑥 ≤ 01.26 | ADP |
| furunosystems | acera_1310_firmware | 𝑥 ≤ 01.26 | ADP |
Common Weakness Enumeration
- CWE-287 - Improper AuthenticationWhen an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
- CWE-288 - Authentication Bypass Using an Alternate Path or ChannelA product requires authentication, but the product has an alternate path or channel that does not require authentication.