CVE-2023-39546

high-risk

Published 2023-11-17

CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.

Do I need to act?

-

0.07% chance of exploitation

EPSS score — low exploit probability

-

Not on CISA KEV list

No confirmed active exploitation reported to CISA

?

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

8

CVSS 8.8/10 High

NETWORK / LOW complexity

Affected Products (20)

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Expresscluster X

Affected Vendors

Nec

References (2)

Third Party Advisory https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

Third Party Advisory https://jpn.nec.com/security-info/secinfo/nv23-009_en.html

56

/ 100

high-risk

Severity 30/34 · Critical

Exploitability 0/34 · Minimal

Exposure 26/34 · High