Arbitrary Command Execution in CLUSTERPRO X and EXPRESSCLUSTER X by NEC Corporation
CVE-2023-39545
8.8HIGH
What is CVE-2023-39545?
Multiple NEC products, specifically CLUSTERPRO X and EXPRESSCLUSTER X versions up to 5.1, have a vulnerability that allows an attacker to gain unauthorized access and execute arbitrary commands. This oversight could lead to potential control over the system, making it crucial for users to implement security measures and updates to mitigate the risks associated with this vulnerability.
Affected Version(s)
CLUSTERPRO X (EXPRESSCLUSTER X) 1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1
CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe) 1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1