{"id":"CVE-2026-32964","state":"PUBLISHED","title":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configura","description":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.","publishedAt":"2026-04-20T03:17:52.839Z","updatedAt":"2026-04-20T14:08:52.559Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","source":"jpcert"},"assigner":"jpcert","products":["silex technology, Inc. SD-330AC","silex technology, Inc. AMC Manager"],"affected":[{"vendor":"silex technology, Inc.","product":"SD-330AC","versions":[{"version":"Ver.1.42 and earlier","status":"affected"}]},{"vendor":"silex technology, Inc.","product":"AMC Manager","versions":[{"version":"Ver.5.0.2 and earlier","status":"affected"}]}],"references":["https://www.silex.jp/support/security-advisories/en/2026-001","https://www.silex.jp/support/security-advisories/2026-001","https://jvn.jp/en/vu/JVNVU94271449/"],"weaknesses":["CWE-93"],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/32xxx/CVE-2026-32964.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-32964","state":"PUBLISHED","datePublished":"2026-04-20T03:17:52.839Z","dateUpdated":"2026-04-20T14:08:52.559Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2026-03-17T00:23:24.981Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration."}],"affected":[{"vendor":"silex technology, Inc.","product":"SD-330AC","versions":[{"version":"Ver.1.42 and earlier","status":"affected"}]},{"vendor":"silex technology, Inc.","product":"AMC Manager","versions":[{"version":"Ver.5.0.2 and earlier","status":"affected"}]}],"references":[{"url":"https://www.silex.jp/support/security-advisories/en/2026-001"},{"url":"https://www.silex.jp/support/security-advisories/2026-001"},{"url":"https://jvn.jp/en/vu/JVNVU94271449/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"MEDIUM","baseScore":6.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"MEDIUM","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-93","description":"Improper neutralization of CRLF sequences ('CRLF Injection')","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2026-04-20T03:17:52.839Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-20T14:08:43.843940Z","id":"CVE-2026-32964","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-20T14:08:52.559Z"}}]}}}