CVE-2023-38945

2024-03-0600:00:00

mitre

www.cve.org

cve-2023-38945

multilaser

routers

vulnerability

access control

application

crafted url

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Multilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and V12.03.01.09_pt, and Multilaser RE163V v12.03.01.08_pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL.

References

seclists.org/fulldisclosure/2024/Mar/1