SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://www.silex.jp/support/security-advisories/2026-001 Vendor Advisory
- https://www.silex.jp/support/security-advisories/en/2026-001 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.9 · silextechnologyNVD modified 2026-10-26 21:10
Affected (CPE criteria) 2
cpe:2.3:o:silextechnology:sd-330ac_firmware:*:*:*:*:*:*:*:*cpe:2.3:a:silextechnology:amc_manager:*:*:*:*:*:*:*:*
References 3
- https://jvn.jp/en/vu/JVNVU94271449/ Third Party Advisory
- https://www.silex.jp/support/security-advisories/2026-001 Vendor Advisory
- https://www.silex.jp/support/security-advisories/en/2026-001 Vendor Advisory