PatchTheCVEf-logic vulnerabilities
Recent CVEs affecting f-logic products. 9 tracked.
f-logic has 9 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-07-24. Highest priority: CVE-2024-31750 (score 72/100).
- CVE-2024-7066 HIGH 7.3 MITIGATE A vulnerability was found in F-logic DataCube3 1.0
- CVE-2024-34854 CRITICAL 9.8 MITIGATE F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`
- CVE-2024-34852 MEDIUM 6.3 MITIGATE F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execut
- CVE-2024-31750 CRITICAL 9.8 MITIGATE SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive informatio
- CVE-2024-25833 CRITICAL 9.8 MITIGATE F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated ma
- CVE-2024-25832 HIGH 8.8 MITIGATE F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious
- CVE-2024-25831 MEDIUM 5.4 MITIGATE F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to impro
- CVE-2024-25830 CRITICAL 9.8 MITIGATE F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restricti
- CVE-2023-5329 MEDIUM 4.3 UPGRADE A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001
FAQ
How do I fix f-logic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is f-logic being exploited right now?
None of the tracked f-logic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which f-logic CVE should I patch first?
CVE-2024-31750 currently ranks highest (72/100): SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive informatio.