CVE-2023-38944

2024-03-0500:00:00

mitre

www.cve.org

multilaser re160v

multilaser re163v

access control bypass

http header modification

AI Score

7.1

Confidence

Low

EPSS

Percentile

9.0%

JSON

An issue in Multilaser RE160V firmware v12.03.01.09_pt and Multilaser RE163V firmware v12.03.01.10_pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header.

References

seclists.org/fulldisclosure/2024/Mar/0