Easylog Web+ Firmware vulnerabilities

3 known vulnerabilities in Easylog Web+ Firmware from Multisuns. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  EasyLog web+: Improper Control of Generation of Code

  CVE-2023-48390Dec 15, 2023MultisunsEPSS 1.11%

  Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service.

• 7.5 High severity

  EasyLog web+: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-48389Dec 15, 2023MultisunsEPSS 1.31%

  Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

• 9.8 Critical severity

  EasyLog web+: Use of Hard-coded Credentials

  CVE-2023-48388Dec 15, 2023Multisuns

  Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.