CVE-2023-22316

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker to access the product via undocumented Telnet or SSH services.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-912

Affected software

Vendor	Product	Versions
PIXELA CORPORATION	PIX-RT100	versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101

References

https://jvn.jp/en/jp/JVN57296685/index.htmlThird Party Advisory
https://www.pixela.co.jp/products/network/pix_rt100/update.htmlVendor Advisory
https://jvn.jp/en/jp/JVN57296685/index.htmlThird Party Advisory
https://www.pixela.co.jp/products/network/pix_rt100/update.htmlVendor Advisory

Timeline

Published: Jan 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-223177.8Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information d CVE-2023-223187.5Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.CVE-2023-223199.8A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network CVE-2023-22326.5An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira CVE-2023-223207.5OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulner CVE-2023-223215.5Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT fil CVE-2023-223225.5Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user ope CVE-2023-223237.5In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.CVE-2023-223246.5SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arb CVE-2023-223255.9A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 a CVE-2023-223264.9In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.CVE-2023-223274.4Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable infor