Description
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| NEC Corporation | CLUSTERPRO X (EXPRESSCLUSTER X) | affected |
|
||||||
| NEC Corporation | CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe) | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-43256 | CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command. |
References
| Link | Providers |
|---|---|
| https://jpn.nec.com/security-info/secinfo/nv23-009_en.html |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: NEC
Published:
Updated: 2024-08-29T14:33:29.801Z
Reserved: 2023-08-04T07:22:19.322Z
Link: CVE-2023-39546
Vulnrichment
Updated: 2024-08-02T18:10:21.152Z
NVD
Status : Modified
Published: 2023-11-17T06:15:33.947
Modified: 2026-06-17T06:12:34.183
Link: CVE-2023-39546
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-836
Use of Password Hash Instead of Password for Authentication
- NVD-CWE-noinfo