CVE-2023-38555 Details
Description
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 14, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://jvn.jp/en/vu/JVNVU96643580/ | CVE | Third Party Advisory |
| https://www.fujitsu.com/jp/products/network/support/2023/fjlan-01/ | CVE | Vendor Advisory |
| https://jvn.jp/en/vu/JVNVU96643580/ | [email protected] | Third Party Advisory |
| https://www.fujitsu.com/jp/products/network/support/2023/fjlan-01/ | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| fujitsu si-r 30b firmware | All versions |
CPE
Remediation
| |
| fujitsu si-r 30b | All versions |
CPE
Remediation
| |
| fujitsu si-r 130b firmware | All versions |
CPE
Remediation
| |
| fujitsu si-r 130b | All versions |
CPE
Remediation
| |
| fujitsu si-r 90brin firmware | All versions |
CPE
Remediation
| |
| fujitsu si-r 90brin | All versions |
CPE
Remediation
| |
| fujitsu si-r570b firmware | All versions |
CPE
Remediation
| |
| fujitsu si-r570b | All versions |
CPE
Remediation
| |
| fujitsu si-r370b firmware | All versions |
CPE
Remediation
| |
| fujitsu si-r370b | All versions |
CPE
Remediation
| |
| fujitsu si-r220d firmware | All versions |
CPE
Remediation
| |
| fujitsu si-r220d | All versions |
CPE
Remediation
| |
| fujitsu si-r g100 firmware | <= 02.54 |
CPE
Remediation
| |
| fujitsu si-r g100 | All versions |
CPE
Remediation
| |
| fujitsu si-r g200 firmware | <= 02.54 |
CPE
Remediation
| |
| fujitsu si-r g200 | All versions |
CPE
Remediation
| |
| fujitsu si-r g100b firmware | <= 04.12 |
CPE
Remediation
| |
| fujitsu si-r g100b | All versions |
CPE
Remediation
| |
| fujitsu si-r g110b firmware | <= 04.12 |
CPE
Remediation
| |
| fujitsu si-r g110b | All versions |
CPE
Remediation
| |
| fujitsu si-r g200b firmware | <= 04.12 |
CPE
Remediation
| |
| fujitsu si-r g200b | All versions |
CPE
Remediation
| |
| fujitsu si-r g210 firmware | <= 20.52 |
CPE
Remediation
| |
| fujitsu si-r g210 | All versions |
CPE
Remediation
| |
| fujitsu si-r g211 firmware | <= 20.52 |
CPE
Remediation
| |
| fujitsu si-r g211 | All versions |
CPE
Remediation
| |
| fujitsu si-r g120 firmware | <= 20.52 |
CPE
Remediation
| |
| fujitsu si-r g120 | All versions |
CPE
Remediation
| |
| fujitsu si-r g121 firmware | <= 20.52 |
CPE
Remediation
| |
| fujitsu si-r g121 | All versions |
CPE
Remediation
| |
| fujitsu sr-m 50ap1 firmware | All versions |
CPE
Remediation
| |
| fujitsu sr-m 50ap1 | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Aug 3, 2023 | Initial Analysis | [email protected] |