Search vulnerabilities

Results 3

Export CSV
CVE-2023-48389

Multisuns EasyLog web+ - Path Traversal

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
CVE-2023-48390

Multisuns EasyLog web+ - Command Injection

Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
CVE-2023-48388

Multisuns EasyLog web+ - Use of Hard-coded Password

Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors