Multiple vulnerabilities in Field Logic DataCube

🗓️ 17 May 2024 03:05:01Reported by Japan Vulnerability NotesType

Field Logic DataCube has vulnerabilities: credential exposure, XSS, dangerous uploads, SQL injection.

Reporter	Title	Published	Views	Family All 42
0day.today	DataCube3 v1.0 - Unrestricted file upload Remote Code Execution Exploit	11 Mar 202400:00	–	zdt
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in F-Logic Datacube3	6 Mar 202404:11	–	githubexploit
BDU FSTEC	The vulnerability of the microprogramming software of the terminal measuring system for F-logic DataCube3 power generation systems, related to unlimited loading of dangerous files, allows a intruder to execute arbitrary code.	18 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the terminal measurement system for F-logic DataCube3 power generation systems, related to access control deficiencies, allows a intruder to obtain the passwords for root and admin accounts.	18 Mar 202400:00	–	bdu_fstec
Circl	CVE-2024-25830	6 Mar 202419:16	–	circl
Circl	CVE-2024-25832	6 Mar 202404:16	–	circl
CNNVD	Field Logic DataCube3 Security Vulnerability	29 Feb 202400:00	–	cnnvd
CNNVD	Field Logic DataCube3 Security Vulnerability	29 Feb 202400:00	–	cnnvd
CNNVD	Field Logic DataCube3 Permission License and Access Control Issues Vulnerability	29 Feb 202400:00	–	cnnvd
CNNVD	Field Logic DataCube4 Security Vulnerability	29 Feb 202400:00	–	cnnvd

Source	Link
f-logic	www.f-logic.jp/info/2024/0507.html
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
jvn	www.jvn.jp/en/vu/JVNVU95350607/index.html
neroteam	www.neroteam.com/blog/f-logic-datacube3-vulnerability-report
ipa	www.ipa.go.jp/en/security/vulnerabilities/cwe.html
cwe	www.cwe.mitre.org/data/definitions/425.html
ipa	www.ipa.go.jp/en/security/vulnerabilities/cwe.html

17 May 2024 03:05Current

8.1High risk

Vulners AI Score8.1

CVSS 38.8

CVSS 3.19.8

EPSS0.2403

SSVC