CVE-2023-48390

CRITICAL

Multisuns EasyLog web+ firmware - Unauthenticated Code Injection

Title source: llm
STIX 2.1

Description

Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service.

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0112
EPSS Percentile 61.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-94
Status published
Products (1)
multisuns/easylog_web\+_firmware 1.13.2.8
Published Dec 15, 2023
Tracked Since Feb 18, 2026