CVE-2026-32964

MEDIUM

silex technology SD-330AC <=Ver.1.42 - CRLF Injection

Title source: llm
STIX 2.1

Description

SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.

References (3)

Scores

CVSS v3 6.5
EPSS 0.0006
EPSS Percentile 17.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-93
Status published
Products (4)
silex technology, Inc./AMC Manager Ver.5.0.2 and earlier
silex technology, Inc./SD-330AC Ver.1.42 and earlier
silextechnology/amc_manager < 5.1.0
silextechnology/sd-330ac_firmware < 1.50
Published Apr 20, 2026
Tracked Since Apr 20, 2026