CVE-2023-39222

OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows: ACERA 1320 firmware ver.01.26 and earlier, ACERA 1310 firmware ver.01.26 and earlier, ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

• CWE-78

• https://jvn.jp/en/vu/JVNVU94497038/Third Party Advisory
• https://www.furunosystems.co.jp/news/info/vulner20231002.htmlVendor Advisory
• https://jvn.jp/en/vu/JVNVU94497038/Third Party Advisory
• https://www.furunosystems.co.jp/news/info/vulner20231002.htmlVendor Advisory

Published

Oct 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39216Improper input validation in Zoom Desktop Client for Windows…9.8
• CVE-2023-39217Improper input validation in Zoom SDK’s before 5.14.10 may a…7.5
• CVE-2023-39218Client-side enforcement of server-side security in Zoom clie…4.9
• CVE-2023-39219PingFederate Administrative Console dependency contains a we…7.5
• CVE-2023-3922An issue has been discovered in GitLab affecting all version…7.1
• CVE-2023-39221Improper access control for some Intel Unison software may a…8.8
• CVE-2023-39223Stored cross-site scripting vulnerability exists in CGIs inc…5.4
• CVE-2023-39224Archer C5 firmware all versions and Archer C7 firmware versi…8
• CVE-2023-39226In Delta Electronics InfraSuite Device Master v.1.0.7, a vul…9.8
• CVE-2023-39227​Softneta MedDream PACS stores usernames and passwords in pl…7.5
• CVE-2023-39228Improper access control for some Intel Unison software may a…7.5
• CVE-2023-39230Insecure inherited permissions in some Intel Rapid Storage T…7.8