Approved changes feed: RSS · Atom

cpe:2.3:h:sato:cl4nx-j_plus:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSato (1c2df3ac-5a99-5df4-9873-f6ea4449ef40)
ProductCl4Nx J Plus (8a7bf6d6-67ae-5f83-b431-0e4054930902)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5328 not_vulnerable 2026-06-08 06:19:43.211765 SATO CL4NX-J Plus Cookie improper authentication
MEDIUM (6.3)
A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2. This affects an unknown part of the component Cookie Handler. The manipulation with the input auth=user,level1,settings; web=true leads to improper authentication. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-241029 was assigned to this vulnerability.
Published: 2023-10-01T23:31:04.962Z
Updated: 2024-08-02T07:52:08.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5327 not_vulnerable 2026-06-08 06:19:43.211249 SATO CL4NX-J Plus path traversal
LOW (3.5)
A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /rest/dir/. The manipulation of the argument full leads to path traversal. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241028.
Published: 2023-10-01T23:00:06.319Z
Updated: 2024-09-20T16:21:09.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5326 not_vulnerable 2026-06-08 06:19:43.210391 SATO CL4NX-J Plus WebConfig improper authentication
MEDIUM (6.3)
A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-241027.
Published: 2023-10-01T22:00:08.112Z
Updated: 2024-09-20T16:21:50.811Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.