Lucene search
HistoryDec 15, 2023 - 9:15 a.m.
CVE-2023-48389
easylog web+
path traversal
unauthenticated
download
bypass authentication
system files
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
45.2%
Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected configurations
Node
multisunseasylog_web\+_firmwareMatch1.13.2.8
multisunseasylog_web\+Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| multisuns | easylog_web\+_firmware | 1.13.2.8 | cpe:2.3:o:multisuns:easylog_web\+_firmware:1.13.2.8:*:*:*:*:*:*:* |
| multisuns | easylog_web\+ | - | cpe:2.3:h:multisuns:easylog_web\+:-:*:*:*:*:*:*:* |
Related
prion
prion
Path traversal
2023-12-15 09:15:00
cvelist
cvelist
CVE-2023-48389 Multisuns EasyLog web+ - Path Traversal
2023-12-15 08:50:43
cve
cve
CVE-2023-48389
2023-12-15 09:15:08
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
45.2%
Related for NVD:CVE-2023-48389