CVE-2023-38946

2024-03-0600:00:00

mitre

www.cve.org

vulnerability

multilaser re160

firmware

access control

crafted cookie

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

An issue in Multilaser RE160 firmware v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01 allows attackers to bypass the access control and gain complete access to the application via supplying a crafted cookie.

References

seclists.org/fulldisclosure/2024/Mar/2