High · 8.8 CVE-2023-38946 EUVD-2023-42706GHSA-726f-22p9-pqrr

An issue in Multilaser RE160 firmware v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01 allows attackers to bypass the access control and gain comple…

Published Mar 6, 2024 · Updated Aug 26, 2024 · Assigned by mitre

Description

An issue in Multilaser RE160 firmware v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01 allows attackers to bypass the access control and gain complete access to the application via supplying a crafted cookie.

References

20240302 Multilaser Router - Access Control Bypass through Cookie Manipulation - CVE-2023-38946 mailing-list