Filtered by vendor Unisoon Subscriptions
Filtered by product Ultralog Express Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-3920 1 Unisoon 2 Ultralog Express, Ultralog Express Firmware 2024-09-17 8.1 High
UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.
CVE-2020-3921 1 Unisoon 2 Ultralog Express, Ultralog Express Firmware 2024-09-17 8.6 High
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page.
CVE-2020-3936 1 Unisoon 2 Ultralog Express, Ultralog Express Firmware 2024-09-16 10 Critical
UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.