CVEs (3)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Unisoon 1Ultralog Express Firmware Jun 17, 2026 Mar 27, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command. |
1Unisoon 1Ultralog Express Firmware Jun 17, 2026 Mar 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page. |
1Unisoon 1Ultralog Express Firmware Jun 17, 2026 Mar 27, 2020 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory. |