CVE catalog

CVE-2026-32964

SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead t

[CVE catalog]

Severity
Medium · CVSS 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.28% · Oct 25, 2026

SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpesd-330ac_firmwareNot reported1.50fixed
Cpeamc_managerNot reported5.1.0fixed
Cpesd-330ac_firmwareNot reported1.50fixed
Cpeamc_managerNot reported5.1.0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpesd-330ac_firmwarecpeNot reported1.50Not reportedNot reportedNot reported
Cpeamc_managercpeNot reported5.1.0Not reportedNot reportedNot reported
Cpesd-330ac_firmwarecpeNot reported1.50Not reportedNVD-CVE-2026-32964Not reported
Cpeamc_managercpeNot reported5.1.0Not reportedNVD-CVE-2026-32964Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CISA cybersecurity advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]