CVE-2023-5326CWE-287

SATO CL4NX-J Plus WebConfig improper authentication

Medium · published October 1, 2023

CVSS v3.1
6.3
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-241027.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00514 · 43.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-10-01T22:00Z
EPSS history
Timeline
  • 01 OCT 22:00Z
    SATO CL4NX-J Plus WebConfig improper authentication
    cvelistv5