Skip to content
OpenAdvisories
High · 8.1 CVE-2020-3920 EUVD-2020-25185GHSA-3c6v-c67v-hx4q

Unisoon UltraLog Express - Broken Authentication

Published Mar 27, 2020 · Updated Sep 17, 2024 · Assigned by twcert

Description

UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.

Affected products

VendorProductAffectedFixed
Unisoon UltraLog Express 1.4.0 —

References