high8.1
CVE-2020-3920
UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions.
Impact
UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Unisoon | Ultralog Express Firmware | Version 1.4.0 |