CVE-2023-38555

HIGH
8.8
CVSS Score
Published: July 26, 2023 at 07:43 AM UTC
Updated: June 17, 2026 at 06:10 AM UTC
32 products affected across 1 vendorSi R G200 FirmwareSi R G100B FirmwareSi R570B Firmware

Using Si-R 30B by Fujitsu Limited?

Get instant alerts when new vulnerabilities affect Si-R 30B - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 0.4%
SSVC
No known exploit

Description

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

All versions
fujitsu-si-r-130b (same device)
All versions
fujitsu-si-r-30b (same device)
All versions
fujitsu-si-r-90brin (same device)
v ≤ 02.54
fujitsu-si-r-g100 (same device)
v ≤ 04.12
fujitsu-si-r-g100b (same device)
v ≤ 04.12
fujitsu-si-r-g110b (same device)
v ≤ 20.52
fujitsu-si-r-g120 (same device)
v ≤ 20.52
fujitsu-si-r-g121 (same device)
v ≤ 02.54
fujitsu-si-r-g200 (same device)
v ≤ 04.12
fujitsu-si-r-g200b (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-287

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card