Datacube3 Firmware vulnerabilities

2 known vulnerabilities in Datacube3 Firmware from F-logic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DataCube3: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-7066Jul 24, 2024F-logicEPSS 3.37%

  A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/config_time_sync.php of the component HTTP POST Request Handler. The manipulation of the argumen

• 9.8 Critical severity

  datacube3: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-25830Feb 29, 2024F-logicEPSS 24%

  F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit coul