CVE-2026-32964
- State
- Published
- Severity
- 6.9 Medium
- Published
- Apr 20, 2026
- Updated
- Apr 20, 2026
- Reserved
- Mar 17, 2026
Description
SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N | jpcert |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L | jpcert |
Weaknesses
- CWE-93 Improper neutralization of CRLF sequences ('CRLF Injection')
Affected Products
| Product | Versions |
|---|---|
SD-330ACsilex technology, Inc. |
|
AMC Managersilex technology, Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.