ultralog express firmware vulnerabilities and fixes

Recent CVEs affecting ultralog express firmware, with upgrade or downgrade steps. 3 tracked.

Also searched as: ultralogexpressfirmware.

ultralog express firmware has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-03-27. Highest priority: CVE-2020-3936 (score 57/100).

• CVE-2020-3936 CRITICAL 10.0 MITIGATE UltraLog Express device management interface does not properly filter user inputted string in some specific pa
• CVE-2020-3921 HIGH 8.6 MITIGATE UltraLog Express device management software stores user’s information in cleartext
• CVE-2020-3920 HIGH 8.1 MITIGATE UltraLog Express device management interface does not properly perform access authentication in some specific

FAQ

How do I fix ultralog express firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ultralog express firmware being exploited right now?

None of the tracked ultralog express firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ultralog express firmware CVE should I patch first?

CVE-2020-3936 currently ranks highest (57/100): UltraLog Express device management interface does not properly filter user inputted string in some specific pa.

RSS feed for ultralog express firmware · ← Back to latest CVEs