CVE-2023-38946

The CVE-2023-38946 entry concerns Multilaser RE160 firmware versions 5.07.51_pt_MTL01 and 5.07.52_pt_MTL01. The root cause is an access control bypass via cookie manipulation in the router’s web interface, enabling an attacker to gain complete access to the application. Documented impact is high ...

CVE-2023-38945

CVE-2023-38945 affects Multilaser RE160/RE160V/RE163V web interfaces. The vulnerability is an access control bypass exposed by crafting a URL, allowing attackers to bypass auth and gain full access to the application on affected versions: RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01; RE160V v12....