Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Unisoon Component: Ultralog Express Firmware Clear all filters
TI-2020-03436 CVE-2020-3936 · GHSA-chfh-m75v-856c

Unisoon UltraLog Express - SQL Injection

Priority MEDIUM 45

UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01249 Published 2020-03-27 No fix listed CWE-89
TI-2020-03421 CVE-2020-3921 · GHSA-rj8p-c8g2-ppv6

Unisoon UltraLog Express - Sensitive Data Exposure

Priority MEDIUM 46

UltraLog Express device management software stores user’s information in cleartext.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00706 Published 2020-03-27 No fix listed CWE-312
TI-2020-03420 CVE-2020-3920 · GHSA-3c6v-c67v-hx4q

Unisoon UltraLog Express - Broken Authentication

Priority LOW 37

UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00836 Published 2020-03-27 No fix listed CWE-306