F-Logic

9 CVEs across 4 F-Logic products. Browse F-Logic vulnerabilities, severities, and proof-of-concept exploits.

F-Logic products with known CVEs

ProductCVEs
Datacube38
Datacube3 Firmware5
Datacube41
Datacube4 Firmware1
F-Logic CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-7066High7.32024-07-24A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /a…
CVE-2024-34854Critical9.82024-05-28F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`
CVE-2024-34852Medium6.32024-05-28F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiver_schedule.php…
CVE-2024-31750Critical9.82024-04-19SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.
CVE-2024-25833Critical9.82024-02-29F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in…
CVE-2024-25832High8.82024-02-29F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by mani…
CVE-2024-25831Medium5.42024-02-29F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote…
CVE-2024-25830Critical9.82024-02-29F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can explo…
CVE-2023-5329Medium4.32023-10-02A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the c…