← Back

Unisoon

unisoon

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Ultralog Express Firmware
ultralog_express_firmware
3 CVEs
Ultralog Express
ultralog_express
0 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-3936
1Unisoon
1Ultralog Express Firmware
Jun 17, 2026
Mar 27, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.
CVE-2020-3921
1Unisoon
1Ultralog Express Firmware
Jun 17, 2026
Mar 27, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page.
CVE-2020-3920
1Unisoon
1Ultralog Express Firmware
Jun 17, 2026
Mar 27, 2020
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.