CVE-2023-39429

Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary script via a crafted configuration. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

• CWE-79

• https://jvn.jp/en/vu/JVNVU94497038/Third Party Advisory
• https://www.furunosystems.co.jp/news/info/vulner20231002.htmlVendor Advisory
• https://jvn.jp/en/vu/JVNVU94497038/Third Party Advisory
• https://www.furunosystems.co.jp/news/info/vulner20231002.htmlVendor Advisory

Published

Oct 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39421The RDPWin.dll component as used in the IRM Next Generation …7.7
• CVE-2023-39422The /irmdata/api/ endpoints exposed by the IRM Next Generati…9.8
• CVE-2023-39423The RDPData.dll file exposes the /irmdata/api/common endpoin…9.1
• CVE-2023-39424A vulnerability in RDPngFileUpload.dll, as used in the IRM N…8.8
• CVE-2023-39425Improper access control in some Intel(R) DSA software before…7.8
• CVE-2023-39427 In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt …7.8
• CVE-2023-3943Stack-based Buffer Overflow vulnerability in ZkTeco-based OE…10
• CVE-2023-39431 Sante DICOM Viewer Pro lacks proper validation of user-su…7.8
• CVE-2023-39432Improper access control element in some Intel(R) Ethernet to…7.8
• CVE-2023-39433Improper access control for some Intel(R) CST software befor…4.4
• CVE-2023-39434A use-after-free issue was addressed with improved memory ma…8.8
• CVE-2023-39435Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220…9.8