Lucene search
K

10 matches found

OSV
OSV
added 2024/03/06 12:15 a.m.1 views

CVE-2023-38945

Multilaser RE160 v5.07.51ptMTL01 and v5.07.52ptMTL01, Multilaser RE160V v12.03.01.08pt and V12.03.01.09pt, and Multilaser RE163V v12.03.01.08pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL...

9.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2024/03/06 12:15 a.m.1 views

CVE-2023-38944

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...

9.8CVSS5.8AI score0.00178EPSS
Exploits3References2
Prion
Prion
added 2024/03/06 12:15 a.m.12 views

Improper access control

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...

7.4AI score0.00178EPSS
Exploits3References1
CVE
CVE
added 2024/03/06 12:0 a.m.28 views

CVE-2023-38945

CVE-2023-38945 affects Multilaser RE160/RE160V/RE163V web interfaces. The vulnerability is an access control bypass exposed by crafting a URL, allowing attackers to bypass auth and gain full access to the application on affected versions: RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01; RE160V v12....

9.8CVSS6.8AI score0.00045EPSS
Exploits5References2Affected Software1
CVE
CVE
added 2024/03/05 12:0 a.m.55 views

CVE-2023-38944

CVE-2023-38944 affects Multilaser RE160V (firmware 12.03.01.09_pt) and RE163V (12.03.01.10_pt) with an access-control bypass via HTTP header manipulation, granting full app access. Public exploitation details are not provided in the supplied documents. The PT advisory notes workarounds such as re...

9.8CVSS7AI score0.00178EPSS
Exploits3References2Affected Software1
Cvelist
Cvelist
added 2024/03/05 12:0 a.m.10 views

CVE-2023-38944

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...

7.1AI score0.00178EPSS
Exploits3References1
Vulnrichment
Vulnrichment
added 2024/03/05 12:0 a.m.8 views

CVE-2023-38944

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...

7.4AI score0.00178EPSS
Exploits3References1
CNNVD
CNNVD
added 2024/03/05 12:0 a.m.2 views

Multilaser RE160V and RE163V Security Vulnerability

The Multilaser RE160V and Multilaser RE163V are both wireless routers from Multilaser. A security vulnerability exists in the Multilaser RE160V firmware version v12.03.01.09pt, RE163V firmware version v12.03.01.10pt. An attacker can use this vulnerability to bypass access control and gain full...

9.8CVSS6.9AI score0.00178EPSS
Exploits3References2
Packet Storm
Packet Storm
added 2024/03/04 12:0 a.m.353 views

Multilaser RE160V / RE160 URL Manipulation Access Bypass

=====Tempest Security Intelligence - Security Advisory - CVE-2023-38945======= Access Control Bypass in Multilaser routers' Web Management Interface Author: Vinicius Moraes =====Table of Contents======================================================== 1. Overview 2. Detailed description 3. Other...

9.8CVSS7.4AI score0.00828EPSS
Exploits8
Positive Technologies
Positive Technologies
added 2024/03/02 12:0 a.m.3 views

PT-2024-12768 · Multilaser · Multilaser Re160 +1

Name of the Vulnerable Software and Affected Versions: Multilaser RE160V version 12.03.01.09 pt Multilaser RE163V version 12.03.01.10 pt Description: An issue in the firmware allows attackers to bypass access control and gain complete access to the application via modifying an HTTP header. This...

9.8CVSS7.6AI score0.00178EPSS
Exploits3References9
Rows per page
Query Builder