SD-330AC and AMC Manager provided by silex technology, Inc. contain a reflected cross-site scripting vulnerability. When a user logs in to the affected device and access some crafted web page, arbitrary script may be executed on the user's browser.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://www.silex.jp/support/security-advisories/2026-001 Vendor Advisory
- https://www.silex.jp/support/security-advisories/en/2026-001 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.1 · silextechnologyNVD modified 2026-10-26 21:10
Affected (CPE criteria) 2
cpe:2.3:o:silextechnology:sd-330ac_firmware:*:*:*:*:*:*:*:*cpe:2.3:a:silextechnology:amc_manager:*:*:*:*:*:*:*:*
References 3
- https://jvn.jp/en/vu/JVNVU94271449/ Third Party Advisory
- https://www.silex.jp/support/security-advisories/2026-001 Vendor Advisory
- https://www.silex.jp/support/security-advisories/en/2026-001 Vendor Advisory