go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

Multisuns EasyLog web+ - Use of Hard-coded Password

TVN ID TVN-202312016
CVE ID CVE-2023-48388
CVSS 9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products EasyLog web+ v1.13.2.8
Description Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.
Solution Please contact Multisuns for fixing method.
Credit Evans Huang(Chi Jui Huang), Lucas Yang (SIHAN YANG), Kathy Lin (Yi Hsin Lin), Luke Xie(Xie Hung You), Yuru Sung, Robin Chang(Yujen Chang), Leo Yu(Yu Yu Che)
Public Date 2023-12-15
Top