Read the docs

Unisoon

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Unisoon records in CISA KEV

No Unisoon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ultralog Express Firmware 3 records MEDIUM

Records

3 records

TI-2020-03421 CVE-2020-3921 · GHSA-rj8p-c8g2-ppv6

Unisoon UltraLog Express - Sensitive Data Exposure

Priority MEDIUM 46

UltraLog Express device management software stores user’s information in cleartext.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00706 Published 2020-03-27 No fix listed CWE-312
TI-2020-03436 CVE-2020-3936 · GHSA-chfh-m75v-856c

Unisoon UltraLog Express - SQL Injection

Priority MEDIUM 45

UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01249 Published 2020-03-27 No fix listed CWE-89
TI-2020-03420 CVE-2020-3920 · GHSA-3c6v-c67v-hx4q

Unisoon UltraLog Express - Broken Authentication

Priority LOW 37

UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00836 Published 2020-03-27 No fix listed CWE-306
Open these records in search →