CVE-2026-32964
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.
Risk Assessment
An attacker can inject malicious entries into the system configuration, potentially leading to unauthorized changes in device settings and possible takeover. This could compromise the integrity and security of the network infrastructure.
Recommendation
Update the SD-330AC and AMC Manager software to the version containing the vendor fix. Until then, restrict access to the configuration interface.
Other vulnerabilities in SD-330AC and AMC Manager
See all- CVE-2026-32962Medium
SD-330AC devices and AMC Manager provided by silex technology contain a missing authentication for critical function issue. The device configuration may be altered without authentication.
- CVE-2026-32959Medium
SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with the use of a broken or risky cryptographic algorithm. Information in the traffic may be retrieved via a man-in-the-middle attack.
- CVE-2026-32957Medium
SD-330AC devices and AMC Manager provided by silex technology contain a missing authentication for critical function issue on firmware maintenance. Arbitrary files may be uploaded to the device without authentication.
Original NVD description (English source)
SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS