CVE-2023-38944

CVE-2023-38944 affects Multilaser RE160V (firmware 12.03.01.09_pt) and RE163V (12.03.01.10_pt) with an access-control bypass via HTTP header manipulation, granting full app access. Public exploitation details are not provided in the supplied documents. The PT advisory notes workarounds such as re...

CVE-2023-38945

CVE-2023-38945 affects Multilaser RE160/RE160V/RE163V web interfaces. The vulnerability is an access control bypass exposed by crafting a URL, allowing attackers to bypass auth and gain full access to the application on affected versions: RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01; RE160V v12....