Vulnerability Description
Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Furunosystems | Acera 1210 Firmware | <= 02.36 |
| Furunosystems | Acera 1210 | - |
| Furunosystems | Acera 1150I Firmware | <= 01.35 |
| Furunosystems | Acera 1150I | - |
| Furunosystems | Acera 1150W Firmware | <= 01.35 |
| Furunosystems | Acera 1150W | - |
| Furunosystems | Acera 1110 Firmware | <= 01.76 |
| Furunosystems | Acera 1110 | - |
| Furunosystems | Acera 1020 Firmware | <= 01.86 |
| Furunosystems | Acera 1020 | - |
| Furunosystems | Acera 1010 Firmware | <= 01.86 |
| Furunosystems | Acera 1010 | - |
| Furunosystems | Acera 950 Firmware | <= 01.60 |
| Furunosystems | Acera 950 | - |
| Furunosystems | Acera 850F Firmware | <= 01.60 |
| Furunosystems | Acera 850F | - |
| Furunosystems | Acera 900 Firmware | <= 02.54 |
| Furunosystems | Acera 900 | - |
| Furunosystems | Acera 850M Firmware | <= 02.06 |
| Furunosystems | Acera 850M | - |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/vu/JVNVU94497038/Third Party Advisory
- https://www.furunosystems.co.jp/news/info/vulner20231002.htmlVendor Advisory
- https://jvn.jp/en/vu/JVNVU94497038/Third Party Advisory
- https://www.furunosystems.co.jp/news/info/vulner20231002.htmlVendor Advisory
FAQ
What is CVE-2023-41086?
CVE-2023-41086 is a vulnerability with a CVSS score of 8.8 (HIGH). Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed. Af...
How severe is CVE-2023-41086?
CVE-2023-41086 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-41086?
Check the references section above for vendor advisories and patch information. Affected products include: Furunosystems Acera 1210 Firmware, Furunosystems Acera 1210, Furunosystems Acera 1150I Firmware, Furunosystems Acera 1150I, Furunosystems Acera 1150W Firmware.