CyberSecBulletin

Multilaser vulnerabilities

We track 5 vulnerabilities in Multilaser products across 8 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2024.

5vulnerabilities
2critical
3high
0exploited
8.7average CVSS score

Latest Multilaser vulnerabilities

  • 8.8 High severity

    re160_firmware: Improper Access Control

    CVE-2023-38946Multilaser

    An issue in Multilaser RE160 firmware v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01 allows attackers to bypass the access control and gain complete access to the application via supplying a crafted cookie.

  • 9.8 Critical severity

    re160v_firmware: Improper Access Control

    CVE-2023-38945Multilaser

    Multilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and V12.03.01.09_pt, and Multilaser RE163V v12.03.01.08_pt allows attackers to bypass the access control and gain complete access to the application via supplying a cra

  • 9.8 Critical severity

    re160v_firmware: Improper Privilege Management

    CVE-2023-38944MultilaserEPSS 15.5%

    An issue in Multilaser RE160V firmware v12.03.01.09_pt and Multilaser RE163V firmware v12.03.01.10_pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header.

  • 7.5 High severity

    RE057: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2023-0658Multilaser

    A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible

  • 7.5 High severity

    RE708: Improper Resource Shutdown or Release

    CVE-2023-0029MultilaserEPSS 1.07%

    A vulnerability was found in Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B. It has been rated as problematic. This issue affects some unknown processing of the component Telnet Service. The manipulation leads to denial of service. The attack may be initia