Command Injection Vulnerability in NEC CLUSTERPRO X and EXPRESSCLUSTER X Products
CVE-2023-39544
8.8HIGH
What is CVE-2023-39544?
NEC's CLUSTERPRO X and EXPRESSCLUSTER X products, including SingleServerSafe variants, have a command injection vulnerability in versions 5.1 and earlier. This flaw allows an attacker to gain unauthorized access to the system and execute arbitrary commands, potentially compromising the integrity and security of the impacted environment. Organizations utilizing these products should apply the necessary updates to mitigate the risk associated with this vulnerability.
Affected Version(s)
CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe) 1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1
CLUSTERPRO X(EXPRESSCLUSTER X) 1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1