{"id":"CVE-2026-32964","aliases":["EUVD-2026-23757","GHSA-5f3w-cmwx-c9m9"],"status":"published","title":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of...","description":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00277,"percentile":0.20347,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-93"],"published":"2026-04-20T03:17:52Z","modified":"2026-10-26T21:10:00Z","products":[{"vendor":"silex technology, inc.","product":"amc manager"},{"vendor":"silex technology, inc.","product":"sd-330ac"},{"vendor":"silextechnology","product":"amc_manager"},{"vendor":"silextechnology","product":"sd-330ac_firmware"}],"references":[{"url":"https://www.silex.jp/support/security-advisories/en/2026-001","tags":["Vendor Advisory"]},{"url":"https://www.silex.jp/support/security-advisories/2026-001","tags":["Vendor Advisory"]},{"url":"https://jvn.jp/en/vu/JVNVU94271449/","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32964"},{"url":"https://jvn.jp/en/vu/JVNVU94271449"},{"url":"https://github.com/advisories/GHSA-5f3w-cmwx-c9m9"}],"sources":{"cve":[{"id":"CVE-2026-32964","description":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.","status":"published","published":"2026-04-20T03:17:52.839Z","modified":"2026-04-20T14:08:52.559Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T14:19:57.100857Z"}],"euvd":[{"id":"EUVD-2026-23757","description":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.","status":"published","published":"2026-04-20T03:17:52Z","modified":"2026-04-20T14:08:52Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:24:22.924744Z"}],"ghsa":[{"id":"GHSA-5f3w-cmwx-c9m9","title":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of...","description":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.","status":"published","published":"2026-04-20T06:31:27Z","modified":"2026-04-20T06:31:34Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T15:07:33.028847Z"}],"nvd":[{"id":"CVE-2026-32964","description":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.","status":"published","published":"2026-04-20T04:16:45.45Z","modified":"2026-10-26T21:10:00.17Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-93"],"updated_at":"2026-11-02T14:12:15.120927Z"}]}}