CVE-2023-38555

State
Published
Severity
Not scored
Published
Jul 26, 2023
Updated
Nov 14, 2024
Reserved
Jul 20, 2023

Read the record on cve.org

Description

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Si-R 30BFujitsu Limited
  • All versions Affected
Si-R 130BFujitsu Limited
  • All versions Affected
Si-R 90brinFujitsu Limited
  • All versions Affected
Si-R570BFujitsu Limited
  • All versions Affected
Si-R370BFujitsu Limited
  • All versions Affected
Si-R220DFujitsu Limited
  • All versions Affected
Si-R G100Fujitsu Limited
  • V02.54 and earlier Affected
Si-R G200Fujitsu Limited
  • V02.54 and earlier Affected
Si-R G100BFujitsu Limited
  • V04.12 and earlier Affected
Si-R G110BFujitsu Limited
  • V04.12 and earlier Affected
Si-R G200BFujitsu Limited
  • V04.12 and earlier Affected
Si-R G210Fujitsu Limited
  • V20.52 and earlier Affected
Si-R G211Fujitsu Limited
  • V20.52 and earlier Affected
Si-R G120Fujitsu Limited
  • V20.52 and earlier Affected
Si-R G121Fujitsu Limited
  • V20.52 and earlier Affected
SR-M 50AP1Fujitsu Limited
  • All versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.