FURUNO SYSTEMS vulnerabilities
We track 4 vulnerabilities in FURUNO SYSTEMS products across 16 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 8, 2024.
Latest FURUNO SYSTEMS vulnerabilities
- 8.8 High severity
ACERA 9010-08: Empty Password in Configuration File
The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as
- 8.8 High severity
ACERA 1320: Improper Authentication
Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuration files and/or log fi
- 8.8 High severity
ACERA 1210: Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed. Affected products and versions are as follows: ACERA 1210 firm
- 8.8 High severity
ACERA 1320: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected p