Command Injection Vulnerability in NEC's CLUSTERPRO X and EXPRESSCLUSTER X
CVE-2023-39548
8.8HIGH
What is CVE-2023-39548?
The command injection vulnerability in NEC's CLUSTERPRO X and EXPRESSCLUSTER X allows an attacker to exploit the affected products, gaining unauthorized access. This flaw enables attackers to execute arbitrary commands on the system, compromising data integrity and security. Systems running CLUSTERPRO X Ver5.1 and earlier, as well as EXPRESSCLUSTER X 5.1 and earlier, are particularly at risk. Immediate action is advised to mitigate any potential exploitation.
Affected Version(s)
CLUSTERPRO X (EXPRESSCLUSTER X) 1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.1
CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe) 1.0, 2.0 2.1, 3.0, 3.1, 3.2, 4.0, 4.1, 4.2, 5.0 and 5.0