Unisoon Ultralog Express Firmware
3 CVEs affecting Unisoon Ultralog Express Firmware. Latest disclosed: 2020-03-27. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-3936 | Critical | 10.0 | 2020-03-27 | UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL comm… |
CVE-2020-3921 | High | 8.6 | 2020-03-27 | UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page. |
CVE-2020-3920 | High | 8.1 | 2020-03-27 | UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileg… |