TVN ID	TVN-201911001
CVE ID	CVE-2020-3936
CVSS	10.0 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products	UltraLog Express ver 1.4.0
Description	UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.
Solution	Update to V1.5.0 or later version
Credit	Alan Chung(NCCST)
Public Date	2020-03-27