Lucene search
HistoryDec 15, 2023 - 9:15 a.m.
CVE-2023-48390
cve-2023-48390
multisuns easylog
code injection
vulnerability
unauthenticated remote attacker
exploit
access system
arbitrary system operations
disrupt service
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
55.1%
Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service.
Affected configurations
Node
multisunseasylog_web\+_firmwareMatch1.13.2.8
multisunseasylog_web\+Match-
Related
prion
prion
Code injection
2023-12-15 09:15:00
cvelist
cvelist
CVE-2023-48390 Multisuns EasyLog web+ - Command Injection
2023-12-15 08:55:08
cve
cve
CVE-2023-48390
2023-12-15 09:15:08
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
55.1%
Related for NVD:CVE-2023-48390