Lucene search
HistoryDec 15, 2023 - 9:15 a.m.
CVE-2023-48388
multisuns
easylog
vulnerability
hard-coded credentials
remote attacker
exploit
system operations
disrupt service
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
51.1%
Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.
Affected configurations
Node
multisunseasylog_web\+_firmwareMatch1.13.2.8
multisunseasylog_web\+Match-
Related
cve
cve
CVE-2023-48388
2023-12-15 09:15:08
prion
prion
Hardcoded credentials
2023-12-15 09:15:00
cvelist
cvelist
CVE-2023-48388 Multisuns EasyLog web+ - Use of Hard-coded Password
2023-12-15 08:45:56
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
51.1%
Related for NVD:CVE-2023-48388