Silex SD-330AC Multiple Vulnerabilities Summary (CVE-2026-32955/32956/32958 etc.)

SD-330AC Multiple Vulnerabilities Summary Vulnerability Overview The Silex product SD-330AC has multiple security vulnerabilities, mainly involving the web interface, firmware updates, SNMP agent, AMC Manager communication, and Serial Device Server Setup communication. Attackers may exploit these vulnerabilities to execute malicious code, cause denial of service, obtain sensitive information, or perform unauthorized access. Impact Scope Affected Products: SD-330AC (Ver.1.42 and earlier) and AMC Manager (Ver.5.0.2 and earlier). Specific Vulnerability Details: Web Interface Vulnerabilities: CVE-2026-32955: Unvalidated URI can lead to memory corruption (CVSS 8.8). CVE-2026-32956: Unvalidated URI can lead to buffer overflow (CVSS 9.8). CVE-2026-32957: Insufficient file upload validation (CVSS 5.3). CVE-2026-32963: XSS on system status page (CVSS 6.1). Firmware Update Vulnerability: CVE-2026-32958: Firmware update without signature verification (CVSS 6.5). SNMP Agent Vulnerability: CVE-2023-5621: Denial of service against (CVSS 7.5). AMC Manager Communication Vulnerabilities: CVE-2026-32959: Keystream reuse (CVSS 5.9). CVE-2026-32960: Reuse of authentication information (CVSS 6.5). CVE-2026-32961: Unvalidated data leading to buffer overflow (CVSS 5.3). CVE-2026-32965: Default password leads to unauthorized access (CVSS 7.5). Serial Device Server Setup Communication Vulnerabilities: CVE-2026-32962: Unvalidation leads to unauthorized access (CVSS 5.3). CVE-2024-34487: Unvalidation leads to reboot and denial of service (CVSS 5.3). CVE-2026-32964: Unvalidation leads to system file injection (CVSS 6.5). Remediation Measures SD-330AC Firmware: Update to Ver.1.50U or later. Download link: AMC Manager: Update to Ver.5.1.0 or later. Download link: Notes: After firmware update, firmware must be re-downloaded and installed. It is recommended to set an administrator password. Older versions of AMC Manager (Ver.5.0.2 and earlier) are no longer compatible with the new firmware. * Serial Device Server Setup requires setting an administrator password.

Goal Reached Thanks to every supporter — we hit 100%!

Silex SD-330AC Multiple Vulnerabilities Summary (CVE-2026-32955/32956/32958 etc.)