Improper authentication in Fujitsu Si-R 30B
Priority MEDIUM 40CWE-287Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated attacker to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R 30B all versions, Si-R 130B all versions, Si-R 90brin all versions, Si-R570B all versions, Si-R370B all versions, Si-R220D all versions, Si-R G100 V02.54 and earlier, Si-R G200 V02.54 and earlier, Si-R G100B V04.12 and earlier, Si-R G110B V04.12 and earlier, Si-R G200B V04.12 and earlier, Si-R G210 V20.52 and earlier, Si-R G211 V20.52 and earlier, Si-R G120 V20.52 and earlier, Si-R G121 V20.52 and earlier, and SR-M 50AP1 all versions.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00372 31st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Fujitsu | Si-R 30B | All versions | — | No fix listed | CNA |
| Fujitsu | Si-R 130B | All versions | — | No fix listed | CNA |
| Fujitsu | Si-R 90brin | All versions | — | No fix listed | CNA |
| Fujitsu | Si-R570B | All versions | — | No fix listed | CNA |
| Fujitsu | Si-R370B | All versions | — | No fix listed | CNA |
| Fujitsu | Si-R220D | All versions | — | No fix listed | CNA |
| Fujitsu | Si-R G100 | up to V02.54 | — | No fix listed | CNA |
| Fujitsu | Si-R G200 | up to V02.54 | — | No fix listed | CNA |
| Fujitsu | Si-R G100B | up to V04.12 | — | No fix listed | CNA |
| Fujitsu | Si-R G110B | up to V04.12 | — | No fix listed | CNA |
| Fujitsu | Si-R G200B | up to V04.12 | — | No fix listed | CNA |
| Fujitsu | Si-R G210 | up to V20.52 | — | No fix listed | CNA |
| Fujitsu | Si-R G211 | up to V20.52 | — | No fix listed | CNA |
| Fujitsu | Si-R G120 | up to V20.52 | — | No fix listed | CNA |
| Fujitsu | Si-R G121 | up to V20.52 | — | No fix listed | CNA |
| Fujitsu | SR-M 50AP1 | All versions | — | No fix listed | CNA |
- Si-R 30B VendorFujitsu Affected All versions Fixed in — No fix listed CNA
- Si-R 130B VendorFujitsu Affected All versions Fixed in — No fix listed CNA
- Si-R 90brin VendorFujitsu Affected All versions Fixed in — No fix listed CNA
- Si-R570B VendorFujitsu Affected All versions Fixed in — No fix listed CNA
- Si-R370B VendorFujitsu Affected All versions Fixed in — No fix listed CNA
- Si-R220D VendorFujitsu Affected All versions Fixed in — No fix listed CNA
- Si-R G100 VendorFujitsu Affected up to V02.54 Fixed in — No fix listed CNA
- Si-R G200 VendorFujitsu Affected up to V02.54 Fixed in — No fix listed CNA
- Si-R G100B VendorFujitsu Affected up to V04.12 Fixed in — No fix listed CNA
- Si-R G110B VendorFujitsu Affected up to V04.12 Fixed in — No fix listed CNA
- Si-R G200B VendorFujitsu Affected up to V04.12 Fixed in — No fix listed CNA
- Si-R G210 VendorFujitsu Affected up to V20.52 Fixed in — No fix listed CNA
- Si-R G211 VendorFujitsu Affected up to V20.52 Fixed in — No fix listed CNA
- Si-R G120 VendorFujitsu Affected up to V20.52 Fixed in — No fix listed CNA
- Si-R G121 VendorFujitsu Affected up to V20.52 Fixed in — No fix listed CNA
- SR-M 50AP1 VendorFujitsu Affected All versions Fixed in — No fix listed CNA
CPE configurations NVD · 32
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fujitsu:si-r_30b_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_30b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_130b_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_130b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_90brin_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_90brin:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r570b_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r570b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r370b_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r370b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
- cpe:2.3:o:fujitsu:si-r_30b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_30b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_130b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_130b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_90brin_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_90brin:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r570b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r570b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r370b_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r370b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
Show 22 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fujitsu:si-r220d_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r220d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g100_firmware:*:*:*:*:*:*:*:* | up to 02.54 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g200_firmware:*:*:*:*:*:*:*:* | up to 02.54 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g100b_firmware:*:*:*:*:*:*:*:* | up to 04.12 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g100b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g110b_firmware:*:*:*:*:*:*:*:* | up to 04.12 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g110b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g200b_firmware:*:*:*:*:*:*:*:* | up to 04.12 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g200b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g210_firmware:*:*:*:*:*:*:*:* | up to 20.52 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g210:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g211_firmware:*:*:*:*:*:*:*:* | up to 20.52 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g211:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g120_firmware:*:*:*:*:*:*:*:* | up to 20.52 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:si-r_g121_firmware:*:*:*:*:*:*:*:* | up to 20.52 | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:si-r_g121:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
| cpe:2.3:o:fujitsu:sr-m_50ap1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Fujitsu |
| cpe:2.3:h:fujitsu:sr-m_50ap1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujitsu |
- cpe:2.3:o:fujitsu:si-r220d_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r220d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g100_firmware:*:*:*:*:*:*:*:* Versions up to 02.54 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g200_firmware:*:*:*:*:*:*:*:* Versions up to 02.54 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g100b_firmware:*:*:*:*:*:*:*:* Versions up to 04.12 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g100b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g110b_firmware:*:*:*:*:*:*:*:* Versions up to 04.12 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g110b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g200b_firmware:*:*:*:*:*:*:*:* Versions up to 04.12 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g200b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g210_firmware:*:*:*:*:*:*:*:* Versions up to 20.52 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g211_firmware:*:*:*:*:*:*:*:* Versions up to 20.52 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g211:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g120_firmware:*:*:*:*:*:*:*:* Versions up to 20.52 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:si-r_g121_firmware:*:*:*:*:*:*:*:* Versions up to 20.52 Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:si-r_g121:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
- cpe:2.3:o:fujitsu:sr-m_50ap1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Fujitsu
- cpe:2.3:h:fujitsu:sr-m_50ap1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-38555
- 2026-10-03 Alias added: GHSA-wgrg-g2m9-jr56
References
Sources
- CVE-2023-38555 · CVE Program
- CVE-2023-38555 · NVD
- FIRST EPSS
- GHSA-wgrg-g2m9-jr56 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences