CyberSecBulletin

Zultys vulnerabilities

We track 3 vulnerabilities in Zultys products across 6 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 8, 2023.

3vulnerabilities
1critical
2high
0exploited
8.6average CVSS score

Latest Zultys vulnerabilities

  • 7.2 High severity

    Mx-se Firmware: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-43744ZultysEPSS 1.99%

    An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS commands via a file name parameter in a

  • 8.8 High severity

    Mx-se Firmware: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2023-43743Zultys

    A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an authenticated attacker to execute arbitrary SQL queries on the backend database via t

  • 9.8 Critical severity

    Mx-se Firmware: Improper Authentication

    CVE-2023-43742Zultys

    An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrative session via a protection mechanism fa