CVE-2023-38555
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.
Published:Jul 26, 2023
Last Modified:Nov 21, 2024
EPS:Jul 26, 2023
EPSS Score:0.00053
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Fujitsu
Product
Si-r220d
Fujitsu
Si-r220d
Vendor
Fujitsu
Product
Si-r220d Firmware
Fujitsu
Si-r220d Firmware
Vendor
Fujitsu
Product
Si-r370b
Fujitsu
Si-r370b
Vendor
Fujitsu
Product
Si-r370b Firmware
Fujitsu
Si-r370b Firmware
Vendor
Fujitsu
Product
Si-r570b
Fujitsu
Si-r570b
Vendor
Fujitsu
Product
Si-r570b Firmware
Fujitsu
Si-r570b Firmware
Vendor
Fujitsu
Product
Si-r 130b
Fujitsu
Si-r 130b
Vendor
Fujitsu
Product
Si-r 130b Firmware
Fujitsu
Si-r 130b Firmware
Vendor
Fujitsu
Product
Si-r 30b
Fujitsu
Si-r 30b
Vendor
Fujitsu
Product
Si-r 30b Firmware
Fujitsu
Si-r 30b Firmware
Vendor
Fujitsu
Product
Si-r 90brin
Fujitsu
Si-r 90brin
Vendor
Fujitsu
Product
Si-r 90brin Firmware
Fujitsu
Si-r 90brin Firmware
Vendor
Fujitsu
Product
Si-r G100
Fujitsu
Si-r G100
Vendor
Fujitsu
Product
Si-r G100 Firmware
Fujitsu
Si-r G100 Firmware
Vendor
Fujitsu
Product
Si-r G100b
Fujitsu
Si-r G100b
Vendor
Fujitsu
Product
Si-r G100b Firmware
Fujitsu
Si-r G100b Firmware
Vendor
Fujitsu
Product
Si-r G110b
Fujitsu
Si-r G110b
Vendor
Fujitsu
Product
Si-r G110b Firmware
Fujitsu
Si-r G110b Firmware
Vendor
Fujitsu
Product
Si-r G120
Fujitsu
Si-r G120
Vendor
Fujitsu
Product
Si-r G120 Firmware
Fujitsu
Si-r G120 Firmware
Vendor
Fujitsu
Product
Si-r G121
Fujitsu
Si-r G121
Vendor
Fujitsu
Product
Si-r G121 Firmware
Fujitsu
Si-r G121 Firmware
Vendor
Fujitsu
Product
Si-r G200
Fujitsu
Si-r G200
Vendor
Fujitsu
Product
Si-r G200 Firmware
Fujitsu
Si-r G200 Firmware
Vendor
Fujitsu
Product
Si-r G200b
Fujitsu
Si-r G200b
Vendor
Fujitsu
Product
Si-r G200b Firmware
Fujitsu
Si-r G200b Firmware
Vendor
Fujitsu
Product
Si-r G210
Fujitsu
Si-r G210
Vendor
Fujitsu
Product
Si-r G210 Firmware
Fujitsu
Si-r G210 Firmware
Vendor
Fujitsu
Product
Si-r G211
Fujitsu
Si-r G211
Vendor
Fujitsu
Product
Si-r G211 Firmware
Fujitsu
Si-r G211 Firmware
Vendor
Fujitsu
Product
Sr-m 50ap1
Fujitsu
Sr-m 50ap1
Vendor
Fujitsu
Product
Sr-m 50ap1 Firmware
Fujitsu
Sr-m 50ap1 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
