Technical impact
SD‑330AC and AMC Manager from Silex Technology improperly neutralize CRLF characters, enabling an attacker to inject arbitrary configuration entries when malformed data is processed. The vulnerability allows modification of the system configuration without requiring authenticated privileged access, potentially altering device behavior.
Affected Systems
The flaw affects Silex Technology's AMC Manager and SD‑330AC products. No specific version information is disclosed, so all released builds may be impacted until the vendor’s advisory specifies the affected releases.
Risk and Exploitability
The CVSS score of 6.9 indicates moderate severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting that publicly documented exploitation is not yet known. The likely attack vector is through crafted configuration data supplied via an administrative interface, which is inferred from the description. An attacker would need write access to the configuration management subsystem; achieving the injection would provide the ability to alter critical system settings.
