CVE-2020-3920

Publication date

2020-03-27 03:50:25

Family

twcert

State

PUBLISHED

Description

UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.