CVE-2023-38945

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-03-06 · updated 2026-06-17
Weakness: CWE-284

Description

Multilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and V12.03.01.09_pt, and Multilaser RE163V v12.03.01.08_pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL.

Affected products

Multilaser Re160 Firmware: 5.07.51_pt_mtl01, 5.07.52_pt_mtl01
Multilaser Re160V Firmware: 12.03.01.08_pt, 12.03.01.09_pt
Multilaser Re163V Firmware: 12.03.01.08_pt

References

http://seclists.org/fulldisclosure/2024/Mar/1
http://seclists.org/fulldisclosure/2024/Mar/1
http://seclists.org/fulldisclosure/2024/Mar/2

Get alerted when CVE-2023-38945 or the next vulnerability affects your stack