CVE-2023-38555
Description
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fujitsu si-r_30b_firmware | No range specified | — |
| fujitsu si-r_130b_firmware | No range specified | — |
| fujitsu si-r_90brin_firmware | No range specified | — |
| fujitsu si-r570b_firmware | No range specified | — |
| fujitsu si-r370b_firmware | No range specified | — |
| fujitsu si-r220d_firmware | No range specified | — |
| fujitsu si-r_g100_firmware | v ≤ 02.54 | — |
| fujitsu si-r_g200_firmware | v ≤ 02.54 | — |
| fujitsu si-r_g100b_firmware | v ≤ 04.12 | — |
| fujitsu si-r_g110b_firmware | v ≤ 04.12 | — |
| fujitsu si-r_g200b_firmware | v ≤ 04.12 | — |
| fujitsu si-r_g210_firmware | v ≤ 20.52 | — |
| fujitsu si-r_g211_firmware | v ≤ 20.52 | — |
| fujitsu si-r_g120_firmware | v ≤ 20.52 | — |
| fujitsu si-r_g121_firmware | v ≤ 20.52 | — |
| fujitsu sr-m_50ap1_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.