← Vulnerability feed

Vulnerability record · CVE-2026-32964 · published 20 April 2026

CVE-2026-32964: Silextechnology sd-330ac firmware vulnerability

SSilextechnology · Sd 330ac Firmware

SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.

6.9 CVSS 4.0 Medium EPSS 0.47% · top 61.6% CWE-93 · CWE-93
6.9CVSS 4.0 base score
0.47%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://jvn.jp/en/vu/JVNVU94271449/ Third Party Advisory
https://www.silex.jp/support/security-advisories/2026-001 Vendor Advisory
https://www.silex.jp/support/security-advisories/en/2026-001 Vendor Advisory

Track CVE-2026-32964 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2026-32956Silextechnology sd-330ac firmware heap-based buffer overflow vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect URLs. Arbit…EPSS 0.71%8.7CVE-2026-32965Silextechnology sd-330ac firmware insecure default initialization vulnerabilityInitialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex technology, Inc. When the af…EPSS 0.47%8.7CVE-2026-32955Silextechnology sd-330ac firmware stack-based buffer overflow vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vulnerability in processing the redirect URLs. Arbi…EPSS 0.65%8.2CVE-2026-32959Silextechnology sd-330ac firmware broken cryptographic algorithm vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Information in …EPSS 0.27%7.1CVE-2026-32960Silextechnology sd-330ac firmware vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a sensitive information in resource not removed before reuse. An at…EPSS 0.46%6.9CVE-2026-32961Silextechnology sd-330ac firmware heap-based buffer overflow vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in packet data processing of sx_smpd. …EPSS 0.60%6.9CVE-2026-32962Silextechnology sd-330ac firmware missing authentication for critical function vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration ma…EPSS 0.47%6.9CVE-2026-32958Silextechnology sd-330ac firmware vulnerabilitySD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fak…EPSS 0.40%

Source: NIST National Vulnerability Database (record CVE-2026-32964), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.