High · 8.8 CVE-2023-38945 EUVD-2023-42705GHSA-f2x4-mhq2-99x5

Multilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and V12.03.01.09_pt, and Multilaser RE163V v12.…

Published Mar 6, 2024 · Updated Nov 4, 2025 · Assigned by mitre

Description

Multilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and V12.03.01.09_pt, and Multilaser RE163V v12.03.01.08_pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL.

References

20240302 Multilaser Router - Access Control Bypass through URL Manipulation - CVE-2023-38945 mailing-list