{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-002722.html",
  "dc:date": "2024-04-19T18:07+09:00",
  "dcterms:issued": "2023-07-27T18:12+09:00",
  "dcterms:modified": "2024-04-19T18:07+09:00",
  "description": "The web management interface of Fujitsu network devices Si-R series and SR-M series contains an authentication bypass vulnerability (CWE-287,CVE-2023-38555).\r\n\r\nKatsuhiko Sato (a.k.a. goroh_kun) of 00One, Inc. reported this vulnerability to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-002722.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:fujitsu:si-r220d_firmware",
      "@product": "Si-R 220D firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r370b_firmware",
      "@product": "Si-R 370B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r570b_firmware",
      "@product": "Si-R 570B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_130b_firmware",
      "@product": "Si-R 130B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_30b_firmware",
      "@product": "Si-R 30B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_90brin_firmware",
      "@product": "Si-R 90brin firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g100b_firmware",
      "@product": "Si-R G100B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g100_firmware",
      "@product": "Si-R G100 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g110b_firmware",
      "@product": "Si-R G110B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g120_firmware",
      "@product": "Si-R G120 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g121_firmware",
      "@product": "Si-R G121 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g200b_firmware",
      "@product": "Si-R G200B firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g200_firmware",
      "@product": "Si-R G200 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g210_firmware",
      "@product": "Si-R G210 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:si-r_g211_firmware",
      "@product": "Si-R G211 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:fujitsu:sr-m_50ap1_firmware",
      "@product": "SR-M 50AP1 firmware",
      "@vendor": "FUJITSU",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "5.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:A/AC:H/Au:N/C:P/I:C/A:P",
      "@version": "2.0"
    },
    {
      "@score": "6.4",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2023-002722",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU96643580/index.html",
      "@id": "JVNVU#96643580",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-38555",
      "@id": "CVE-2023-38555",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-38555",
      "@id": "CVE-2023-38555",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-287",
      "@title": "Improper Authentication(CWE-287)"
    }
  ],
  "title": "Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass"
}