CVE-2023-0658

CVE-2023-0658 affects Multilaser RE057 and RE170 (versions 2.1/2.2). The issue resides in the Backup File Handler and involves an unknown portion of the file /param.file.tgz, causing information disclosure. The vulnerability is described as remote-exploitable and classified as critical across mul...

CVE-2023-36146

CVE-2023-36146 affects Multilaser RE 170 firmware 2.2.6733 with a stored XSS in input handling. Connected sources confirm the issue and provide a PoC exploit; PT-Security notes there is no publicly documented fixed version as of their entry. Practical impact is stored XSS via web UI (IP Filtering...