Lucene search
TwcertCVE-2023-48389HistoryDec 15, 2023 - 9:15 a.m.
CVE-2023-48389
2023-12-1509:15:08
CWE-22
twcert
web.nvd.nist.gov
15
cve-2023-48389
easylog
path traversal
vulnerability
remote attacker
authentication bypass
download
nvd
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.8
Confidence
High
EPSS
0.001
Percentile
45.2%
Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected configurations
Node
multisunseasylog_web\+_firmwareMatch1.13.2.8
multisunseasylog_web\+Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| multisuns | easylog_web%2B_firmware | 1.13.2.8 | cpe:/o:multisuns:easylog_web%2B_firmware:1.13.2.8::: |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "EasyLog web+",
"vendor": "Multisuns",
"versions": [
{
"status": "affected",
"version": "1.13.2.8"
}
]
}
]Related
nvd
nvd
CVE-2023-48389
2023-12-15 09:15:08
prion
prion
Path traversal
2023-12-15 09:15:00
cvelist
cvelist
CVE-2023-48389 Multisuns EasyLog web+ - Path Traversal
2023-12-15 08:50:43
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.8
Confidence
High
EPSS
0.001
Percentile
45.2%
Related for CVE-2023-48389