Furunosystems Acera 900 Firmware vulnerabilities

3 CVEs affecting Furunosystems Acera 900 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-41086, published 2023-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-39222, published 2023-10-03. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web…
CVE-2023-39429, published 2023-10-03. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary script via a crafted configuration. Affected products and…
CVE-2023-41086, published 2023-10-03. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed.…