CVE-2023-38555
Vulnerability from cvelistv5
Published
2023-07-26 07:43
Modified
2024-11-14 15:00
Severity ?
Summary
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.
References
vultures@jpcert.or.jphttps://jvn.jp/en/vu/JVNVU96643580/Third Party Advisory
vultures@jpcert.or.jphttps://www.fujitsu.com/jp/products/network/support/2023/fjlan-01/Vendor Advisory
Impacted products
Fujitsu LimitedSi-R 30B
Fujitsu LimitedSi-R 130B
Fujitsu LimitedSi-R 90brin
Fujitsu LimitedSi-R570B
Fujitsu LimitedSi-R370B
Fujitsu LimitedSi-R220D
Fujitsu LimitedSi-R G100
Fujitsu LimitedSi-R G200
Fujitsu LimitedSi-R G100B
Fujitsu LimitedSi-R G110B
Fujitsu LimitedSi-R G200B
Fujitsu LimitedSi-R G210
Fujitsu LimitedSi-R G211
Fujitsu LimitedSi-R G120
Fujitsu LimitedSi-R G121
Fujitsu LimitedSR-M 50AP1
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.080Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.fujitsu.com/jp/products/network/support/2023/fjlan-01/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU96643580/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-38555",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-14T15:00:40.540182Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-14T15:00:48.965Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Si-R 30B",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "All versions "
            }
          ]
        },
        {
          "product": "Si-R 130B",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "All versions "
            }
          ]
        },
        {
          "product": "Si-R 90brin",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "All versions "
            }
          ]
        },
        {
          "product": "Si-R570B",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "All versions "
            }
          ]
        },
        {
          "product": "Si-R370B",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "All versions "
            }
          ]
        },
        {
          "product": "Si-R220D",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "All versions "
            }
          ]
        },
        {
          "product": "Si-R G100",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V02.54 and earlier "
            }
          ]
        },
        {
          "product": "Si-R G200",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V02.54 and earlier "
            }
          ]
        },
        {
          "product": "Si-R G100B",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V04.12 and earlier "
            }
          ]
        },
        {
          "product": "Si-R G110B",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V04.12 and earlier "
            }
          ]
        },
        {
          "product": "Si-R G200B",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V04.12 and earlier "
            }
          ]
        },
        {
          "product": "Si-R G210",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V20.52 and earlier "
            }
          ]
        },
        {
          "product": "Si-R G211",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V20.52 and earlier "
            }
          ]
        },
        {
          "product": "Si-R G120",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V20.52 and earlier "
            }
          ]
        },
        {
          "product": "Si-R G121",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "V20.52 and earlier "
            }
          ]
        },
        {
          "product": "SR-M 50AP1",
          "vendor": "Fujitsu Limited",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authentication bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-26T07:43:21.819Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.fujitsu.com/jp/products/network/support/2023/fjlan-01/"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU96643580/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-38555",
    "datePublished": "2023-07-26T07:43:21.819Z",
    "dateReserved": "2023-07-20T04:38:59.286Z",
    "dateUpdated": "2024-11-14T15:00:48.965Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-38555\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2023-07-26T08:15:10.317\",\"lastModified\":\"2023-08-03T15:10:44.193\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_30b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E28EE76-B14D-4CD0-8629-700E4A049E57\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_30b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26A5F702-9CA3-4FC0-BA2C-DDC417BF7F44\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_130b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0951902C-522C-41AE-9135-38A5FE8FC61D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_130b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BD363D4-92E1-408C-A916-B13C79CDB3B0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_90brin_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6B12318-E024-4195-A04C-4A87E29376B1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_90brin:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D227FE0-CB62-4307-BD83-50E2FB97A341\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r570b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1D201DC-53FF-4E52-982B-C2B8A5D159DB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r570b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B98D1CF-AEFA-4636-B5C7-D4A1F65EE451\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r370b_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2AC6F44-9AAE-42EC-A722-3DD4F15FA58B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r370b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87427346-4788-4CC8-B2C5-63F9FAAA0CE0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r220d_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B13027C-AF9E-4587-BA63-25CF143709B1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r220d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"747CAFCA-6CCF-493D-A077-C4EA72E86B12\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g100_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"02.54\",\"matchCriteriaId\":\"FE8967A0-E037-4714-AD2A-0F33E12E7857\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g100:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DEBF2DE-F53A-4531-9200-592A90A45031\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g200_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"02.54\",\"matchCriteriaId\":\"4E3DA54A-B61F-4777-9911-9CB49DE70E37\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g200:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EA86548-563C-4340-878C-BCDBB93413DB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g100b_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"04.12\",\"matchCriteriaId\":\"EAE582F6-0BE6-45BA-94C3-C601EC42BE15\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g100b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA5D2F15-0D60-4538-9000-4678CA35768A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g110b_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"04.12\",\"matchCriteriaId\":\"25C552B3-F6A7-4744-A73D-40F5ECB155AE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g110b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49C9921C-2BB9-40AA-8D24-A41680130AC1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g200b_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"04.12\",\"matchCriteriaId\":\"1552DC77-3D3D-4557-96B2-FA400551B3F4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g200b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40106C20-AEA1-4AFF-A08E-A1842DF73C7F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g210_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.52\",\"matchCriteriaId\":\"8BDDB7CF-DA5E-4D61-851D-9EB252C43CFF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g210:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EFB15FCE-1FCD-470D-9B7C-7B70CF6E620F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g211_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.52\",\"matchCriteriaId\":\"BFE72230-F92B-498E-A659-41A3A410D36D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g211:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BA5BC32-1708-4300-8605-067133647E39\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g120_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.52\",\"matchCriteriaId\":\"BFADD23B-58CD-40F0-8DF7-8E3E5DBC97A2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g120:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16893532-9805-4683-92E6-17D5B269A5A0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:si-r_g121_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.52\",\"matchCriteriaId\":\"4EB2658B-D4C4-4D0C-9A51-851DFD5CA366\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:si-r_g121:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1211AF91-AB3E-4D65-8CEB-E7F218EA0075\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:sr-m_50ap1_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38E0FA5F-9EB0-4A43-A298-DFF55CDA28FC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:sr-m_50ap1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A88EAF58-E557-457C-B154-035F3081307D\"}]}]}],\"references\":[{\"url\":\"https://jvn.jp/en/vu/JVNVU96643580/\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.fujitsu.com/jp/products/network/support/2023/fjlan-01/\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.